|Type||Denial of service|
jp2/opj_decompress.c in OpenJPEG before version 2.4.0 has a use-after-free that can be triggered if there is a mix of valid and invalid files in a directory operated on by the decompressor. Triggering a double-free may also be possible. This is related to calling opj_image_destroy twice.
|09 Dec 2020||ASA-202012-21||AVG-1339||openjpeg2||Medium||multiple issues|