CVE-2024-56826

Medium

Published: —Translated: 27/07/2026(UTC)NVD NIST

Summary

A flaw was found in the OpenJPEG project where a heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application crash or other undefined behavior.

Risk Assessment

A remote attacker can supply a crafted image and use specific options, causing a heap buffer overflow, potentially allowing arbitrary code execution or a crash.

Recommendation

Update OpenJPEG to a version that fixes the heap buffer overflow during image decompression.

Original NVD description (English source)

A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application crash or other undefined behavior.