{"schema_version":"1.8.0","id":"CVE-2018-7648","published":"2018-03-02T16:29:00.213Z","modified":"2026-08-07T14:59:34.631277Z","related":["openSUSE-SU-2024:11120-1"],"details":"An issue was discovered in mj2/opj_mj2_extract.c in OpenJPEG 2.3.0. The output prefix was not checked for length, which could overflow a buffer, when providing a prefix with 50 or more characters on the command line.","affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/uclouvain/openjpeg","events":[{"introduced":"081de4b15f54cb4482035b7bf5e3fb443e4bc84b"},{"last_affected":"081de4b15f54cb4482035b7bf5e3fb443e4bc84b"},{"fixed":"cc3824767bde397fedb8a1ae4786a222ba860c8d"}],"database_specific":{"cpe":"cpe:2.3:a:uclouvain:openjpeg:2.3.0:*:*:*:*:*:*:*","extracted_events":[{"introduced":"2.3.0"},{"last_affected":"2.3.0"}],"source":["CPE_STRING","REFERENCES"]}}],"versions":["2.3.0","v2.3.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-7648.json","vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["320682276623054871944337876216980139907","263881287619099284430256011721633502297","2848672890557279726117555643167944211","181734107993385793232230324283849354312","303973254535423105423398004318675394013","185316987648347462227752028736580492744","146381316644439753433409365344195423450"],"threshold":0.9},"id":"CVE-2018-7648-411c3d8d","signature_type":"Line","signature_version":"v1","source":"https://github.com/uclouvain/openjpeg/commit/cc3824767bde397fedb8a1ae4786a222ba860c8d","target":{"file":"src/bin/mj2/opj_mj2_extract.c"}},{"deprecated":false,"digest":{"function_hash":"18908964000435985548001782315975091160","length":1790},"id":"CVE-2018-7648-9adc509c","signature_type":"Function","signature_version":"v1","source":"https://github.com/uclouvain/openjpeg/commit/cc3824767bde397fedb8a1ae4786a222ba860c8d","target":{"file":"src/bin/mj2/opj_mj2_extract.c","function":"main"}}],"vanir_signatures_modified":"2026-08-07T14:59:34Z"}}],"references":[{"type":"REPORT","url":"https://github.com/uclouvain/openjpeg/issues/1088"},{"type":"FIX","url":"https://github.com/uclouvain/openjpeg/commit/cc3824767bde397fedb8a1ae4786a222ba860c8d"}],"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}