CVE-2024-56826

A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application crash or other undefined behavior.

OpenJPEG is an open-source JPEG 2000 codec written in C language. It has been developed in order to promote the use of JPEG 2000, a still-image compression standard from the Joint Photographic Experts Group (JPEG). Since April 2015, it is officially recognized by ISO/IEC and ITU-T as a JPEG 2000 Reference Software.

Security Fix(es):

This bug is triggered when we use opj_decompress with the -r option and its argument set to 2. Version v2.5.2 also has this vulnerability. Reproducible: Always Steps to Reproduce: see https://github.com/uclouvain/openjpeg/issues/1563 References: https://github.com/uclouvain/openjpeg/issues/1563 https://github.com/uclouvain/openjpeg/commit/e492644fbded4c820ca55b5e50e598d346e850e8 https://bugzilla.redhat.com/show_bug.cgi?id=2333954(CVE-2024-56826)

OpenJPEG is an open source library for reading and writing image files in JPEG2000 format.

Security Fix(es):

• openjpeg: heap buffer overflow in bin/common/color.c (CVE-2024-56826)

• openjpeg: heap buffer overflow in lib/openjp2/j2k.c (CVE-2024-56827)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9 Release Notes linked from the References section.

A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application crash or other undefined behavior.

OpenJPEG is an open source library for reading and writing image files in JPEG2000 format.

Security Fix(es):

• openjpeg: heap buffer overflow in bin/common/color.c (CVE-2024-56826)
• openjpeg: heap buffer overflow in lib/openjp2/j2k.c (CVE-2024-56827)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.

A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application crash or other undefined behavior.

A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application crash or other undefined behavior.

• CVE-2024-56826: fix out-of-bounds read in sycc422_to_rgb()/sycc420_to_rgb()
• CVE-2024-56827: validate tile-part number in opj_j2k_add_tlmarker()

Heap buffer overflow in bin/common/color.c. (CVE-2024-56826) Heap buffer overflow in lib/openjp2/j2k.c. (CVE-2024-56827)

These are all security issues fixed in the libopenjp2-7-2.5.3-2.1 package on the GA media of openSUSE Tumbleweed.

This update for openjpeg2 fixes the following issues:

• CVE-2024-56826: Fixed heap buffer overflow in bin/common/color.c (bsc#1235029)

This update for openjpeg2 fixes the following issues:

• CVE-2024-56826: Fixed heap buffer overflow in bin/common/color.c (bsc#1235029)

Frank Zeng discovered that OpenJPEG incorrectly handled memory when using the decompression utility. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2024-56826, CVE-2024-56827)

It was discovered that OpenJPEG, vendored in Ghostscript did not correctly handle large image files. If a user or system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2023-39327) Thomas Rinsma discovered that Ghostscript did not correctly handle printing certain variables. An attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2024-29508) It was discovered that Ghostscript did not correctly handle loading certain libraries. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS. (CVE-2024-33871) It was discovered that Ghostscript did not correctly handle certain memory operations. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2024-56826, CVE-2024-56827, CVE-2025-27832, CVE-2025-27835, CVE-2025-27836) Vasileios Flengas discovered that Ghostscript did not correctly handle argument sanitization. An attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 24.10 and Ubuntu 25.04. (CVE-2025-48708)