![]() |
VOOZH | about |
An issue was discovered in OpenJPEG 2.3.0. It allows remote attackers to cause a denial of service (attempted excessive memory allocation) in opj_calloc in openjp2/opj_malloc.c, when called from opj_tcd_init_tile in openjp2/tcd.c, as demonstrated by the 64-bit opj_decompress.
CVE-2019-6988 (Candidate) is related to these bugs:
| Summary | In | Importance | Status | |||
|---|---|---|---|---|---|---|
| 711061 | [MIR] openjpeg2 | openjpeg2 (Ubuntu) | High | Fix Released | ||