PT-2025-3336 · Openjpeg+9 · Openjpeg+9

Frank-Z7 · Published 2025-01-02 · Updated 2025-07-08 · CVE-2024-56826

Positive Technologies (AI Summary)

CVSS v3.1

5.6

Medium

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H

Name of the Vulnerable Software and Affected Versions OpenJPEG project (affected versions not specified)

Description A flaw was found in the OpenJPEG project, where a heap buffer overflow condition may be triggered when certain options are specified while using the opj decompress utility. This can lead to an application crash or other undefined behavior.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

ALSA-2025:7309

AZL-55450

AZL-55454

BDU:2025-03457

CVE-2024-56826

DLA-4107-1

DSA-5851-1

INFSA-2025_7309

MGASA-2025-0012

OESA-2025-1031

OPENSUSE-SU-2025:14620-1

OPENSUSE-SU-2025_0044-1

RHSA-2025:7309

RHSA-2025_7309

SUSE-SU-2025:0040-1

SUSE-SU-2025:0044-1

SUSE-SU-2025_0040-1

SUSE-SU-2025_0044-1

USN-7223-1

USN-7623-1

Affected Products

Almalinux

Astra Linux

Debian

Linuxmint

Openjpeg

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 67

• https://ubuntu.com/security/CVE-2025-27835 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-56826 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-56826 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-56826 · Security Note
• https://osv.dev/vulnerability/MGASA-2025-0012 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2025-0012.html · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/AWMGURRKWFOTMCKEBHYWF7HHDJSY7BTR · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-39327 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7223-1 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-55450 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-56826 · Security Note
• https://access.redhat.com/errata/RHSA-2025:7309 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-1020SE47 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2024-56826 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56826 · Vendor Advisory