Skip to content
OpenAdvisories
High · 8.8 CVE-2017-2811 EUVD-2017-11952GHSA-qj5p-vmvr-x7qq

A code execution vulnerability exists in the Kakadu SDK 7.9's parsing of compressed JPEG 2000 images. A specially crafted JPEG 2000 file ca…

Published Apr 24, 2018 · Updated Sep 16, 2024 · Assigned by talos

Description

A code execution vulnerability exists in the Kakadu SDK 7.9's parsing of compressed JPEG 2000 images. A specially crafted JPEG 2000 file can be read by the program, and can lead to an out of bounds write causing an exploitable condition to arise.

Affected products

VendorProductAffectedFixed
Kakadu Software Kakadu SDK 7.9 - OSX & Linux —

References