Skip to content
OpenAdvisories
High · 8.8 CVE-2017-2812 EUVD-2017-11953GHSA-988p-2vg3-2vh4

A code execution vulnerability exists in the kdu_buffered_expand function of the Kakadu SDK 7.9. A specially crafted JPEG 2000 file can be …

Published Apr 24, 2018 · Updated Sep 16, 2024 · Assigned by talos

Description

A code execution vulnerability exists in the kdu_buffered_expand function of the Kakadu SDK 7.9. A specially crafted JPEG 2000 file can be read by the program and can lead to an out of bounds write causing an exploitable condition to arise.

Affected products

VendorProductAffectedFixed
Kakadu Software Kakadu SDK 7.9 - OSX & Linux —

References