An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2k_to_image tool. Converting a specially crafted JPEG2000 file to another format could cause the application to crash or, potentially, disclose some data from the heap.
| Version | Score | Severity | Vector String |
|---|---|---|---|
| 3.0 | 6.5 | Medium | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H |
| Product | Vendor | Version |
|---|---|---|
| openjpeg | The OpenJPEG Project | <= 3.3.7 |