CVE-2012-3535

OpenJPEG < 1.5 - Heap-Based Buffer Overflow via Crafted JPEG2000 File

Title source: llm
STIX 2.1

Description

Heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted JPEG2000 file.

References (13)

Core 13
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/50360
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090021.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/50681
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/55214
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/77994
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/84978
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/08/27/2
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2012:157
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090579.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2012-1283.html
Issue Tracking x_refsource_misc
https://bugzilla.redhat.com/show_bug.cgi?id=842918
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/08/27/3

Scores

EPSS 0.0615
EPSS Percentile 92.6%

Details

CWE
CWE-119
Status published
Products (3)
uclouvain/openjpeg 1.3
uclouvain/openjpeg 1.4
uclouvain/openjpeg < 1.5
Published Sep 05, 2012
Tracked Since Feb 18, 2026