VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 19, 2018· Updated Aug 5, 2024

CVE-2018-14423

CVE-2018-14423

Description

Division-by-zero in OpenJPEG 2.3.0 and earlier allows denial of service via crafted image.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Division-by-zero in OpenJPEG 2.3.0 and earlier allows denial of service via crafted image.

Vulnerability

A division-by-zero vulnerability exists in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in lib/openjp3d/pi.c of OpenJPEG through version 2.3.0 [1][2]. The issue occurs when processing crafted images that trigger modulo operations with a zero divisor, leading to an application crash.

Exploitation

An attacker can exploit this vulnerability by providing a specially crafted image file (e.g., PGX, PNM, or BMP) to the OpenJPEG library for parsing [1]. No authentication or special network position is required; the attack can be remote if the library is exposed to untrusted input.

Impact

Successful exploitation results in a denial of service via application crash. The CIA impact is limited to availability; no code execution or information disclosure is associated with this specific vulnerability [1][2].

Mitigation

The vulnerability is fixed in Ubuntu as part of USN-4109-1 (released 21 August 2019) with updated packages for OpenJPEG [1]. Users should upgrade to OpenJPEG 2.3.1 or later. If no patch is available, avoid processing untrusted images with OpenJPEG.

References
  1. USN-4109-1: OpenJPEG vulnerabilities | Ubuntu security notices | Ubuntu
  2. Division-by-zero vulnerabilities in the function pi_next_pcrl, pi_next_cprl and pi_next_rpcl in src/lib/openjp3d/pi.c

AI Insight generated on May 26, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected products

59

Patches

0

No patches discovered yet.

Vulnerability mechanics

Root cause

"Division by zero vulnerabilities exist in multiple functions within OpenJPEG."

Attack vector

A remote attacker can trigger a denial of service by providing a specially crafted image file. This file can cause the functions `pi_next_pcrl`, `pi_next_cprl`, and `pi_next_rpcl` to perform a division by zero operation. This operation leads to an application crash, resulting in a denial of service.

Affected code

The vulnerabilities are located in the `pi_next_pcrl`, `pi_next_cprl`, and `pi_next_rpcl` functions within the file `src/lib/openjp3d/pi.c` [ref_id=1]. These functions contain conditional logic that can lead to division by zero when processing image data.

What the fix does

The patch addresses the division-by-zero vulnerabilities by adding checks before performing bitwise shifts that could result in zero. Specifically, it verifies that `rpx`, `rpy`, and `rpz` are less than 31 and that the shifted values `(comp->dx << rpx)`, `(comp->dy << rpy)`, and `(comp->dz << rpz)` do not overflow. This prevents the division by zero errors that would otherwise occur in the modulo operations within the affected functions [ref_id=1].

Preconditions

  • inputA specially crafted image file that triggers the division-by-zero condition.

Generated on Jun 2, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

4

News mentions

0

No linked articles in our index yet.