description: There's a flaw in openjpeg in versions prior to 2.4.0 in src/lib/openjp2/pi.c. When an attacker is able to provide crafted input to be processed by the openjpeg encoder, this could cause an out-of-bounds read. The greatest impact from this flaw is to application availability.
problem types: CWE-122
affected:
{
product: openjpeg
vendor: n/a
versions:
status: affected, version: openjpeg 2.4.0
}