Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An exploitable heap underflow vulnerability exists in the derive_taps_and_gains function in kdu_v7ar.dll of Kakadu Software SDK 7.10.2. A specially crafted jp2 file can cause a heap overflow, which can result in remote code execution. An attacker could provide a malformed file to the victim to trigger this vulnerability.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
整数下溢(超界折返)
Vulnerability Title
Kakadu Software SDK 缓冲区错误漏洞
Vulnerability Description
Kakadu Software SDK是澳大利亚Kakadu Software公司的一套JPEG2000软件开发工具包（SDK）。 Kakadu Software SDK 7.10.2版本中的kdu_v7ar.dll文件的‘derive_taps_and_gains’函数存在缓冲区错误漏洞。远程攻击者可通过向用户提供格式错误的文件利用该漏洞执行代码。
CVSS Information
N/A
Vulnerability Type
N/A