PT-2018-2722 · Openjpeg+3 · Openjpeg+3

Yngweijs

·

Publicado

2018-10-09

·

Atualizado

2025-09-26

·

CVE-2018-18088

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions OpenJPEG version 2.3.0
Description The issue is related to a NULL pointer dereference for the red variable in the imagetopnm function of jp2/convert.c. This can lead to a denial of service. The vulnerability can be exploited by a remote attacker.
Recommendations For OpenJPEG version 2.3.0, consider applying a patch or fix to resolve the NULL pointer dereference issue in the imagetopnm function. As a temporary workaround, consider restricting access to the imagetopnm function until a patch is available.

Exploit

Correção

NULL Pointer Dereference

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

ALT-PU-2019-1582
BDU:2019-01575
CVE-2018-18088
DLA-1579-1
DSA-4405-1
MGASA-2019-0004
OPENSUSE-SU-2024:11120-1
SUSE-SU-2025:03352-1
SUSE-SU-2025:03353-1
SUSE-SU-2025_03352-1
SUSE-SU-2025_03353-1
USN-4109-1
USN-5664-1

Produtos afetados

Alt Linux
Openjpeg
Suse
Ubuntu