PT-2017-19437 · Mageia · Openjpeg2

Published 2017-08-24 · Updated 2017-08-24

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned.

Description The issue involves heap-based buffer overflows and a memory allocation failure. Patches have been added to address these problems.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

MGASA-2017-0299

Affected Products

Openjpeg2

References · 6

• https://osv.dev/vulnerability/MGASA-2017-0299 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2017-0299.html · Security Note
• https://blogs.gentoo.org/ago/2017/08/14/openjpeg-memory-allocation-failure-in-opj_aligned_alloc_n-opj_malloc-c · Note
• https://blogs.gentoo.org/ago/2017/08/16/openjpeg-heap-based-buffer-overflow-in-opj_mqc_flush-mqc-c · Note
• https://bugs.mageia.org/show_bug.cgi?id=21572 · Note
• https://blogs.gentoo.org/ago/2017/08/16/openjpeg-heap-based-buffer-overflow-in-opj_write_bytes_le-cio-c · Note