Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in lib/openjp3d/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service (application crash).
The product divides a value by zero.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Openjpeg | Uclouvain | * | 2.3.0 (including) |
| Openjpeg | Ubuntu | upstream | * |
| Openjpeg2 | Ubuntu | artful | * |
| Openjpeg2 | Ubuntu | bionic | * |
| Openjpeg2 | Ubuntu | cosmic | * |
| Openjpeg2 | Ubuntu | disco | * |
| Openjpeg2 | Ubuntu | upstream | * |
| Openjpeg2 | Ubuntu | xenial | * |