tocsin

Debian/openjpeg2: high 7.8

Integer overflow in the opj_pi_create_decode function in pi.c in OpenJPEG allows remote attackers to execute arbitrary code via a crafted JP2 file, which triggers an out-of-bounds read or write.

Action: Upgrade openjpeg2 to 2.1.2-1 or later.

Affected

introducedfixedlast affected
02.1.2-1-

Fixed versions

2.1.2-1

Sources

published · modified · JSON