CVE-2022-1122

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-1122
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-1122.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-1122
Downstream
ALPINE (1)
AZL (1)
BELL (1)
DEBIAN (1)
JLSEC (1)
MGASA (1)
OESA (1)
openSUSE (1)
RHSA (2)
RLSA (2)
SUSE (2)
UBUNTU (1)
Related
ALSA (2)
openSUSE (1)
SUSE (2)
Published
2022-03-29T17:25:44Z
Modified
2026-08-12T03:51:29Z
Summary
[none]
Details

A flaw was found in the opj2_decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free() on an uninitialized pointer, leading to a segmentation fault and a denial of service.

Database specific 
{
    "cna_assigner":  "redhat",
    "cwe_ids":  [
        "CWE-665"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1122.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "introduced":  "openjpeg2 version 2.4.0 and prior"
                },
                {
                    "last_affected":  "openjpeg2 version 2.4.0 and prior"
                }
            ],
            "source":  "AFFECTED_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/uclouvain/openjpeg

Affected ranges

Type
GIT
Repo
https://github.com/uclouvain/openjpeg
Events
Introduced
37ac30ceff6640bbab502388c5e0fa0bff23f505
Last Affected
37ac30ceff6640bbab502388c5e0fa0bff23f505
Database specific
Show details 
{
    "cpe":  "cpe:2.3:a:uclouvain:openjpeg:2.4.0:*:*:*:*:*:*:*",
    "extracted_events":  [
        {
            "introduced":  "2.4.0"
        },
        {
            "last_affected":  "2.4.0"
        }
    ],
    "source":  "CPE_STRING"
}

Affected versions

2.*
2.4.0
v2.*
v2.4.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-1122.json"