CVE-2022-1122
—CVSS 3.1
5.5 medium
EPSS
1%p64
Published
()
Modified
Description
A flaw was found in the opj2_decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free() on an uninitialized pointer, leading to a segmentation fault and a denial of service.
- Vendors
- uclouvainfedoraprojectdebian
- Products
- openjpeg, fedora, debian linux
- Weakness
- CWE-665, CWE-824
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
In the news0 stories
No ingested article mentions this CVE yet.