VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 19, 2018· Updated Aug 5, 2024

CVE-2018-5785

CVE-2018-5785

Description

Integer overflow in OpenJPEG 2.3.0's opj_j2k_setup_encoder allows denial of service via crafted BMP file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Integer overflow in OpenJPEG 2.3.0's opj_j2k_setup_encoder allows denial of service via crafted BMP file.

Vulnerability

In OpenJPEG 2.3.0, the opj_j2k_setup_encoder function in openjp2/j2k.c contains an integer overflow caused by an out-of-bounds left shift. The shift exponent 4294967295 (0xFFFFFFFF) is too large for a 32-bit int type, leading to undefined behavior. This code path is reachable when processing a specially crafted BMP file using the opj_compress tool [2].

Exploitation

An attacker can trigger the vulnerability by supplying a malicious BMP file to opj_compress. No authentication or special network position is required; the file can be delivered remotely (e.g., via email, download). The crash occurs during encoding setup, as demonstrated by running bin/opj_compress -n 1 -i $POC -o OUTPUT with the proof-of-concept file [2].

Impact

Successful exploitation causes a denial of service (application crash). The description and references confirm only a DoS impact; no remote code execution or information disclosure is associated with this CVE [1][2].

Mitigation

The vulnerability is fixed in later versions of OpenJPEG. Ubuntu addressed it in USN-4109-1 (August 2019) [1]. Users should upgrade to a patched release. No workaround is documented, and the CVE is not listed in CISA's Known Exploited Vulnerabilities catalog.

References
  1. USN-4109-1: OpenJPEG vulnerabilities | Ubuntu security notices | Ubuntu
  2. Out-of-bound left shift in opj_j2k_setup_encoder (src/lib/openjp2/j2k.c)

AI Insight generated on May 26, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected products

28

Patches

0

No patches discovered yet.

Vulnerability mechanics

No source-code context for this CVE — mechanics is only generated when we can read the actual fix diff. Without that, the four sections (root cause, attack vector, affected code, fix) would be speculation rather than analysis.

References

3

News mentions

0

No linked articles in our index yet.