REDHAT-BUG-1800535: Buffer Overflow
Published Feb 7, 2020
·Updated
A heap-based buffer overflow in the qmfbid==1 case in opjt1clbldecodeprocessor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28.
Upstream Issue:
https://github.com/uclouvain/openjpeg/issues/1231
Affected Software
1 affected component
OpenJPEG OpenJPEG>=2.3.1<2020-01-28
Event History
Feb 7, 2020
Data Sourced
via Red Hat·11:35 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-1800535?
The severity of REDHAT-BUG-1800535 is considered high due to the potential for remote code execution.
2
How do I fix REDHAT-BUG-1800535?
To fix REDHAT-BUG-1800535, update OpenJPEG to a version released after January 28, 2020.
3
What systems are affected by REDHAT-BUG-1800535?
REDHAT-BUG-1800535 affects OpenJPEG versions 2.3.1 through January 28, 2020.
4
What type of vulnerability is REDHAT-BUG-1800535?
REDHAT-BUG-1800535 is a heap-based buffer overflow vulnerability.
5
Is there a workaround for REDHAT-BUG-1800535?
There are no specific workarounds recommended for REDHAT-BUG-1800535 besides applying the available patch.