Heap Out-of-Bounds Write in OpenJPH Decoder

Executive Summary

This vulnerability is a heap out-of-bounds write flaw in OpenJPH through version 0.32.0. It occurs in the HTJ2K cleanup-pass decoder when processing one-row codeblocks. Attackers can exploit this by providing a specially crafted .j2c or .jph file with small precinct sizes. The decoder writes a second row past the allocated codeblock buffer, causing memory corruption and potential crashes.

Useful 0 Not Useful 0

Detection Guidance

Detecting this vulnerability requires analyzing image files processed by OpenJPH. Monitor for crashes when decoding .j2c or .jph files with small precinct sizes. Check logs for heap corruption errors or segmentation faults during image processing tasks.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to memory corruption and application crashes when processing malicious image files. It may cause denial-of-service conditions or arbitrary code execution if exploited. Systems using OpenJPH for image processing, especially those handling untrusted files like EXR or JPH formats, are at risk.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability primarily impacts memory safety and system stability by allowing heap out-of-bounds writes, which could lead to crashes or undefined behavior. It does not directly affect compliance with GDPR, HIPAA, or similar standards unless exploited to compromise data integrity or availability in systems handling sensitive data. However, if exploited in systems processing medical or personal data, it could indirectly violate confidentiality or integrity requirements under these regulations.

Useful 0 Not Useful 0

Mitigation Strategies

• Upgrade OpenJPH to the latest version beyond 0.32.0 if a patch is available.
• Avoid processing untrusted .j2c or .jph files, especially those with unusual precinct sizes.
• Implement input validation for image files in your pipeline to reject potentially malicious codestreams.

Useful 0 Not Useful 0