CVE-2024-56827
5.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H
Summary
A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application crash or other undefined behavior.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
2.5.3 < * | unaffected | ||
| Red Hat | Red Hat Enterprise Linux 9 | 0:2.4.0-8.el9 < * | unaffected |
Weaknesses
- CWE-122: Heap-based Buffer Overflow
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
CVE Program Container
Additional References
References
- https://access.redhat.com/errata/RHSA-2025:7309
- https://access.redhat.com/security/cve/CVE-2024-56827
- https://bugzilla.redhat.com/show_bug.cgi?id=2335174
- https://github.com/uclouvain/openjpeg/commit/e492644fbded4c820ca55b5e50e598d346e850e8
- https://github.com/uclouvain/openjpeg/issues/1564
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.