CVE-2017-2812

A code execution vulnerability exists in the kdu_buffered_expand function of the Kakadu SDK 7.9

High · published April 24, 2018

CVSS v3.0
8.8
EPSS
1%
Percentile
72.5
In the wild
Unconfirmed
What it is

A code execution vulnerability exists in the kdu_buffered_expand function of the Kakadu SDK 7.9. A specially crafted JPEG 2000 file can be read by the program and can lead to an out of bounds write causing an exploitable condition to arise.

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01421 · 72.5th percentile
Published
2018-04-24T19:00Z
EPSS history
Timeline
  • 24 APR 19:00Z
    A code execution vulnerability exists in the kdu_buffered_expand function of the Kakadu SDK 7.9
    cvelistv5