OpenJPEG 2.4.0 through 2.5.4, and git master through commit 8314119b, contains an out-of-bounds read and write in opj…

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

OpenJPEG 2.4.0 through 2.5.4, and git master through commit 8314119b, contains an out-of-bounds read and write in opj_dwt_encode_and_deinterleave_v() in src/lib/openjp2/dwt.c. This allows an attacker to cause a denial of service.

Kaynaklar6 kaynak

• CVE.org kaydı
• NVD kaydı
• github.com/uclouvain/openjpeg/issues/1673 Diğer
• github.com/uclouvain/openjpeg/pull/1674 Diğer
• github.com/…ommit/a38e970fa59abd796c703ec469e578b09f7ffa33 Diğer
• openwall.com/lists/oss-security/2026/10/05/5 Diğer

Kayıt geçmişi

1. 30 Eki 2026 20:30CVSS puanı değişti: – → 6.5
2. 26 Eki 2026 03:00Yayımlandı

İlgili açıklar

• 7,9 CVE-2026-62958libriscv: Out of bounds read vuln in the ELF parser (Denial of service)
• 6,9 CVE-2026-119338Tesseract: Double free and use after free in the PAGE XML renderer on right-to-left pages
• 7,8 CVE-2026-78402Stack Buffer Overflow in Sentinel Keys Server
• 7,8 CVE-2026-119777Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: stack buffer overflow in h.266/vvc parser
• 5,9 CVE-2026-119299gopacket: SCTP chunk sub-decoder out-of-bounds panics on crafted segments
• 7,8 CVE-2026-119722Blender before 4.5.15 and 5.x before 5.2.3 Heap Out-of-Bounds Access via read_struct()