CVE-2018-7648

An issue was discovered in mj2/opjmj2extract.c in OpenJPEG 2.3.0. The output prefix was not checked for length, which could overflow a buffer, when providing a prefix with 50 or more characters on the command line.

References

Affected packages

Git / github.com/uclouvain/openjpeg

Affected ranges

Type: GIT
Repo: https://github.com/uclouvain/openjpeg
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

cc3824767bde397fedb8a1ae4786a222ba860c8d

Affected versions

v2.*

v2.2.0

v2.3.0

Database specific

vanir_signatures

[
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://github.com/uclouvain/openjpeg/commit/cc3824767bde397fedb8a1ae4786a222ba860c8d",
        "target": {
            "file": "src/bin/mj2/opj_mj2_extract.c"
        },
        "id": "CVE-2018-7648-411c3d8d",
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "320682276623054871944337876216980139907",
                "263881287619099284430256011721633502297",
                "2848672890557279726117555643167944211",
                "181734107993385793232230324283849354312",
                "303973254535423105423398004318675394013",
                "185316987648347462227752028736580492744",
                "146381316644439753433409365344195423450"
            ],
            "threshold": 0.9
        }
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://github.com/uclouvain/openjpeg/commit/cc3824767bde397fedb8a1ae4786a222ba860c8d",
        "target": {
            "function": "main",
            "file": "src/bin/mj2/opj_mj2_extract.c"
        },
        "id": "CVE-2018-7648-9adc509c",
        "signature_version": "v1",
        "digest": {
            "length": 1790.0,
            "function_hash": "18908964000435985548001782315975091160"
        }
    }
]