CVE-2017-14164: Buffer Overflow
A size-validation issue was discovered in opjj2kwritesot in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service (heap-based buffer overflow affecting opjwritebytesLE in lib/openjp2/cio.c) or possibly remote code execution. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-14152.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-14164?
CVE-2017-14164 has a CVSS score indicating a high severity level due to potential remote code execution and denial of service risks.
How do I fix CVE-2017-14164?
To fix CVE-2017-14164, upgrade OpenJPEG to version 2.3.0 or later where the vulnerability has been addressed.
What vulnerabilities does CVE-2017-14164 exploit?
CVE-2017-14164 exploits a size-validation issue leading to an out-of-bounds write and heap-based buffer overflow.
Which versions of OpenJPEG are affected by CVE-2017-14164?
OpenJPEG versions prior to 2.3.0 are affected by CVE-2017-14164.
Can CVE-2017-14164 lead to remote code execution?
Yes, CVE-2017-14164 may lead to remote code execution if successfully exploited.