CVE-2019-5125
High
Description
An exploitable heap overflow vulnerability exists in the JPEG2000 parsing functionality of LEADTOOLS 20. A specially crafted J2K image file can cause an out of bounds write of a heap buffer, potentially resulting in code execution. An attack can specially craft a J2K image to trigger this vulnerability.
SeverityHigh
CVSS7.8
Exploit probability—
ProductLeadtools
PublishedNov 6, 2019
First seenNov 6, 2019
Weakness typeCWE-122CWE-122
How to fix
Update
- leadtools leadtools20.0.2019.11.19 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| leadtools leadtools | v < 20.0.2019.11.19 | 20.0.2019.11.19 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.