CVE-2018-7648: Buffer Overflow
An issue was discovered in mj2/opjmj2extract.c in OpenJPEG 2.3.0. The output prefix was not checked for length, which could overflow a buffer, when providing a prefix with 50 or more characters on the command line.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2018-7648.
What is the severity of CVE-2018-7648?
The severity of CVE-2018-7648 is critical with a CVSS score of 9.8.
What is the affected software?
The affected software is Uclouvain Openjpeg version 2.3.0.
How does CVE-2018-7648 affect the software?
CVE-2018-7648 can cause a buffer overflow in OpenJPEG 2.3.0 when providing a prefix with 50 or more characters on the command line.
Are there any references available for CVE-2018-7648?
Yes, you can find more information about CVE-2018-7648 at the following references: [Link 1](https://github.com/uclouvain/openjpeg/commit/cc3824767bde397fedb8a1ae4786a222ba860c8d) and [Link 2](https://github.com/uclouvain/openjpeg/issues/1088).