Description (CNA)
OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG from 2.5.1 through 2.5.3, a call to opj_jp2_read_header may lead to OOB heap memory write when the data stream p_stream is too short and p_image is not initialized.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| uclouvain / openjpeg | affected >= 2.5.1, <= 2.5.3 |
CWE
CWE-457
References
- https://github.com/uclouvain/openjpeg/commit/f809b80c67717c152a5ad30bf06774f00da4fd2d
- https://github.com/uclouvain/openjpeg/pull/1573
- https://securitylab.github.com/advisories/GHSL-2025-057_OpenCV
ADP enrichment
No English description supplied.
No references supplied.