CVE-2017-2812 A code execution vulnerability exists in the kdu_buffered_expand function of the Kakadu SDK 7.9. A specially crafted JPEG 2000 file can be read by the program and can lead to an out of bounds write ca...
HighCVSS 7.8
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A code execution vulnerability exists in the kdu_buffered_expand function of the Kakadu SDK 7.9. A specially crafted JPEG 2000 file can be read by the program and can lead to an out of bounds write causing an exploitable condition to arise.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kakadusoftware kakadu sdk | = 7.9 | No fix listed |
| Kakadu Software Pty Ltd Kakadu SDK | = 7.9 - OSX & Linux | No fix listed |
References
- 100140 broken-link vdb-entry
- www.talosintelligence.com third-party-advisory