Vulnetix
Try Vulnetix Request Demo
CVE-2017-14152 PUBLISHED

A mishandled zero case was discovered in opj_j2k_set_cinema_parameters in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service (heap-based buffer overflow affecting opj_write_bytes_LE in lib/openjp2/cio.c and opj_j2k_write_sot in lib/openjp2/j2k.c) or possibly remote code execution.

EPSS 1.09% · 77.8th percentile

Risk Scores

EPSS Score
1.09%
77.8th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSopenjpeg20, 2.1.0-2.1, 2.1.0-2.1ubuntu0.1

Timeline

References

Open in Interactive Console →