Posted by Security @ Red Eagle Tech on Oct 05 Hello, OpenJPEG's reversible (5/3) forward wavelet transform reads and writes past the end of a heap allocation when a tile's lower resolution levels have zero height at an odd start. It is an encoder-side issue, not a decoder one: it is reached through the encoding parameters, not through a crafted input file. A single encode usually looks fine.

Read the full article at oss-security →