Debian Openjpeg2 vulnerabilities

CVE-2022-1122 [MEDIUM] CVE-2022-1122: openjpeg2 - A flaw was found in the opj2_decompress program in openjpeg2 2.4.0 in the way it... A flaw was found in the opj2_decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free() on an uninitialized pointer, leading to a segmentation fault and a denial of service. Scope: local bookworm: resolved (fixed in 2.

CVE-2018-6616 [MEDIUM] CVE-2018-6616: openjpeg2 - In OpenJPEG 2.3.0, there is excessive iteration in the opj_t1_encode_cblks funct... In OpenJPEG 2.3.0, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. Scope: local bookworm: resolved (fixed in 2.3.0-2) bullseye: resolved (fixed in 2.3.0-2) forky: resolved (fixed in 2.3.0-2) sid: resolved (fixed in 2.3.0-2) trix

CVE-2016-1626 [MEDIUM] CVE-2016-1626: openjpeg2 - The opj_pi_update_decode_poc function in pi.c in OpenJPEG, as used in PDFium in ... The opj_pi_update_decode_poc function in pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, miscalculates a certain layer index value, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document. Scope: local bookworm: resolved (fixed in 2.1.2-1.2) bullseye: resolved (fixed in 2.1.2-1.2) forky:

CVE-2016-4797 [MEDIUM] CVE-2016-4797: openjpeg2 - Divide-by-zero vulnerability in the opj_tcd_init_tile function in tcd.c in OpenJ... Divide-by-zero vulnerability in the opj_tcd_init_tile function in tcd.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (application crash) via a crafted jp2 file. NOTE: this issue exists because of an incorrect fix for CVE-2014-7947. Scope: local bookworm: resolved (fixed in 2.1.1-1) bullseye: resolved (fixed in 2.1.1-1) forky: resol