CVE-2022-1122
LowSummary
A flaw was found in the opj2_decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames, it calls free() on an uninitialized pointer, leading to a segmentation fault and potential denial of service.
Risk Assessment
An attacker can crash the opj2_decompress program, causing a denial of service. This may disrupt systems processing images.
Recommendation
Update openjpeg2 to a patched version. Limit the number of files processed simultaneously by opj2_decompress.
Original NVD description (English source)
A flaw was found in the opj2_decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free() on an uninitialized pointer, leading to a segmentation fault and