CVE-2018-7648 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Openjpeg
Severity
9.8CRITICALNVD
EPSS
0.6%
top 31.63%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 2
Latest updateMay 13
Description
An issue was discovered in mj2/opj_mj2_extract.c in OpenJPEG 2.3.0. The output prefix was not checked for length, which could overflow a buffer, when providing a prefix with 50 or more characters on the command line.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9
Affected Packages2 packages
Patches
🔴Vulnerability Details
3📋Vendor Advisories
1Debian▶
CVE-2018-7648: openjpeg2 - An issue was discovered in mj2/opj_mj2_extract.c in OpenJPEG 2.3.0. The output p...↗2018