8.8
Élevée
CVE-2019-5154 An exploitable heap overflow vulnerability exists in the JPEG2000 parsing functionality of LEADTOOLS 20.0.2019.3.15
Description
An exploitable heap overflow vulnerability exists in the JPEG2000 parsing functionality of LEADTOOLS 20.0.2019.3.15. A specially crafted J2K image file can cause an out of bounds write of a null byte in a heap buffer, potentially resulting in code execution. An attack can specially craft a J2K image to trigger this vulnerability.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| LEADTOOLS | 20.0.2019.3.15 | Pas de correctif indiqué |
Références
- talosintelligence.com talosintelligence.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de LEADTOOLS
Les 7 CVE de LEADTOOLS →
CVE-2020-6089
An exploitable code execution vulnerability exists in the ANI file format parser of Leadtools 20
8.8
Élevée
CVE-2019-5092
An exploitable heap out of bounds write vulnerability exists in the UI tag parsing functionality of the DICOM image…
8.8
Élevée
CVE-2019-5100
An exploitable integer overflow vulnerability exists in the BMP header parsing functionality of LEADTOOLS 20
8.8
Élevée
CVE-2019-5125
An exploitable heap overflow vulnerability exists in the JPEG2000 parsing functionality of LEADTOOLS 20
8.8
Élevée