CVE-2018-16375 (NVD)

2018-09-03

An issue was discovered in OpenJPEG 2.3.0. Missing checks for header_info.height and header_info.width in the function pnmtoimage in bin/jpwl/convert.c can lead to a heap-based buffer overflow.

Products Openjpeg
Type Out-of-bounds Write (CWE-787)
First patch - None (likely due to unavailable code)
Patches https://github.com/uclouvain/openjpeg/issues/1126
Links http://www.securityfocus.com/bid/105266