REDHAT-BUG-1036493: Medium severity openjpeg vulnerability

Published Dec 2, 2013

Updated

Raphael Geissert discovered out-of-bounds memory read flaws in OpenJPEG. If a specially-crafted image were opened by an application linked against OpenJPEG, it could cause the application to crash or lead to information leaks.

These issues only affected the version of OpenJPEG as shipped in Fedora (version 1.5.1)

Affected Software

1 affected component

OpenJPEG OpenJPEG

Event History

Dec 2, 2013

Data Sourced

via Red Hat·06:57 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1036493?

The severity of REDHAT-BUG-1036493 is high due to potential crashes or information leaks.

How do I fix REDHAT-BUG-1036493?

To fix REDHAT-BUG-1036493, update OpenJPEG to the latest patched version as provided by your distribution.

What types of applications are affected by REDHAT-BUG-1036493?

Applications linked against the vulnerable version of OpenJPEG are affected by REDHAT-BUG-1036493.

What is the nature of the vulnerability in REDHAT-BUG-1036493?

REDHAT-BUG-1036493 is characterized by out-of-bounds memory read flaws that can lead to application crashes.

Who discovered REDHAT-BUG-1036493?

REDHAT-BUG-1036493 was discovered by Raphael Geissert.