Vulnerabilities > CVE-2019-5144 - Out-of-bounds Write vulnerability in Kakadusoftware Kakadu Software 7.10.2
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
An exploitable heap underflow vulnerability exists in the derive_taps_and_gains function in kdu_v7ar.dll of Kakadu Software SDK 7.10.2. A specially crafted jp2 file can cause a heap overflow, which can result in remote code execution. An attacker could provide a malformed file to the victim to trigger this vulnerability.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Common Weakness Enumeration (CWE)
Talos
| id | TALOS-2019-0933 |
| last seen | 2019-12-28 |
| published | 2019-12-11 |
| reporter | Talos Intelligence |
| source | http://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0933 |
| title | Kakadu Software SDK ATK marker code execution vulnerability |