CVE-2018-16375 — Out-of-bounds Write in Openjpeg

CWE-787 — Out-of-bounds WriteCWE-122 — Heap-based Buffer Overflow13 documents8 sources
Severity
8.8HIGHNVD
OSV6.5
EPSS
0.4%
top 38.21%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
THE Openjpeg Project Openjpeg2Uclouvain Openjpeg
Timeline
PublishedSep 3
Latest updateMay 13

Description

An issue was discovered in OpenJPEG 2.3.0. Missing checks for header_info.height and header_info.width in the function pnmtoimage in bin/jpwl/convert.c can lead to a heap-based buffer overflow.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages3 packages

▶Debianthe_openjpeg_project/openjpeg2< 2.3.1-1+3
▶Ubuntuthe_openjpeg_project/openjpeg2< 2.1.2-1.1+deb9u6ubuntu0.1~esm1+1

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

4
GHSA
GHSA-cr53-w8r4-842j: An issue was discovered in OpenJPEG 2↗2022-05-13
▶
OSV
openjpeg2 vulnerabilities↗2021-03-17
▶
CVEList
CVE-2018-16375: An issue was discovered in OpenJPEG 2↗2018-09-03
▶
OSV
CVE-2018-16375: An issue was discovered in OpenJPEG 2↗2018-09-03
▶

📋Vendor Advisories

3
Ubuntu
OpenJPEG vulnerabilities↗2021-03-17
▶
Red Hat
openjpeg: Heap-based buffer overflow in pnmtoimage function in bin/jpwl/convert.c↗2018-09-03
▶
Debian
CVE-2018-16375: openjpeg2 - An issue was discovered in OpenJPEG 2.3.0. Missing checks for header_info.height...↗2018
▶

💬Community

5
Bugzilla
CVE-2018-16375 openjpeg: Heap-based buffer overflow in pnmtoimage function in bin/jpwl/convert.c [fedora-all]↗2018-09-07
▶
Bugzilla
CVE-2018-16375 openjpeg2: openjpeg: Heap-based buffer overflow in pnmtoimage function in bin/jpwl/convert.c [fedora-all]↗2018-09-07
▶
Bugzilla
CVE-2018-16375 mingw-openjpeg2: openjpeg: Heap-based buffer overflow in pnmtoimage function in bin/jpwl/convert.c [fedora-all]↗2018-09-07
▶
Bugzilla
CVE-2018-16375 openjpeg2: openjpeg: Heap-based buffer overflow in pnmtoimage function in bin/jpwl/convert.c [epel-all]↗2018-09-07
▶
Bugzilla
CVE-2018-16375 openjpeg: Heap-based buffer overflow in pnmtoimage function in bin/jpwl/convert.c↗2018-09-06
▶
CVE-2018-16375 — Out-of-bounds Write in Openjpeg | cvebase