CVE-2018-7648

An issue was discovered in mj2/opjmj2extract.c in OpenJPEG 2.3.0. The output prefix was not checked for length, which could overflow a buffer, when providing a prefix with 50 or more characters on the command line.

References

Affected packages

Git / github.com/uclouvain/openjpeg

Affected ranges

Type: GIT
Repo: https://github.com/uclouvain/openjpeg
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

cc3824767bde397fedb8a1ae4786a222ba860c8d

Affected versions

v2.*

v2.2.0

v2.3.0

Database specific

{
    "vanir_signatures": [
        {
            "id": "CVE-2018-7648-411c3d8d",
            "digest": {
                "line_hashes": [
                    "320682276623054871944337876216980139907",
                    "263881287619099284430256011721633502297",
                    "2848672890557279726117555643167944211",
                    "181734107993385793232230324283849354312",
                    "303973254535423105423398004318675394013",
                    "185316987648347462227752028736580492744",
                    "146381316644439753433409365344195423450"
                ],
                "threshold": 0.9
            },
            "signature_version": "v1",
            "target": {
                "file": "src/bin/mj2/opj_mj2_extract.c"
            },
            "source": "https://github.com/uclouvain/openjpeg/commit/cc3824767bde397fedb8a1ae4786a222ba860c8d",
            "deprecated": false,
            "signature_type": "Line"
        },
        {
            "id": "CVE-2018-7648-9adc509c",
            "digest": {
                "length": 1790.0,
                "function_hash": "18908964000435985548001782315975091160"
            },
            "signature_version": "v1",
            "target": {
                "function": "main",
                "file": "src/bin/mj2/opj_mj2_extract.c"
            },
            "source": "https://github.com/uclouvain/openjpeg/commit/cc3824767bde397fedb8a1ae4786a222ba860c8d",
            "deprecated": false,
            "signature_type": "Function"
        }
    ]
}