CVE Catalog
CVE-2024-56827
MediumSummary
A heap buffer overflow flaw was found in the OpenJPEG project. It can be triggered when using the opj_decompress utility with certain options, leading to application crash or undefined behavior.
Risk Assessment
An attacker could cause application crashes or potentially exploit the overflow for arbitrary code execution, threatening system stability and security.
Recommendation
Update OpenJPEG to the latest patched version and avoid using opj_decompress with untrusted options.
Original NVD description (English source)
A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application crash or other undefined behavior.