CVE-2021-29338

Low

Published: —Translated: 27/07/2026(UTC)NVD NIST

Summary

An integer overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service (DoS). This occurs when using the "-ImgDir" command line option on a directory containing 1048576 files.

Risk Assessment

An attacker can remotely crash applications using OpenJPEG, leading to service disruption and potential financial or operational losses.

Recommendation

Update OpenJPEG to a patched version. Limit the number of files processed simultaneously by tools using the "-ImgDir" option.

Original NVD description (English source)

Integer Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service (DoS). This occurs when the attacker uses the command line option "-ImgDir" on a directory that contains 1048576 files.