ECHO-71a9-4d38-b645
See a problem?- Import Source
- https://advisory.echohq.com/osv/ECHO-71a9-4d38-b645.json
- JSON Data
- https://api.osv.dev/v1/vulns/ECHO-71a9-4d38-b645
- Upstream
- Withdrawn
- 2026-06-24T18:00:04Z
- Published
- 2026-06-21T17:25:33Z
- Modified
- 2026-09-15T03:33:46Z
- Summary
- Integer overflow in the HTJ2K decoder (ht_undo_impl) leading to a heap-buffer-overflow. HTJ2K support (OpenEXRCore internal_ht.cpp / ht_undo_impl) was added in 3.4.0; affected range is 3.4.0-3.4.11. The codec does not exist in 3.1.x, so 3.1.13 is not affected (Debian reports only a fixed_version, not the affected range).
- Details
- References