Skip to content

Add advisory for openjp2 memory corruption bug - #3346

Open
Ollie-Pearce wants to merge 4 commits into
rustsec:mainfrom
Ollie-Pearce:openjp2
Open

Ollie-Pearce wants to merge 4 commits into
rustsec:mainfrom
Ollie-Pearce:openjp2

Conversation

@Ollie-Pearce

@Ollie-Pearce Ollie-Pearce commented Oct 10, 2026 •

Copy link
Copy Markdown
Contributor

Affected crate(s)

  • openjp2 (recent downloads per crates.io: 62,003)

Links to upstream issue(s) or PR(s)

Neopallium/openjp2#10

Severity

Memory corruption reachable from safe code

Checklist

  • Advisory filename(s) starts with RUSTSEC-0000-0000 as the ID
  • date field is set to the public disclosure date
  • Contains a concise and descriptive title after advisory metadata
  • Asked maintainer(s) if publishing an advisory is appropriate

Received no response from maintainer over a month after public disclosure.

@djc

djc commented Oct 12, 2026

Copy link
Copy Markdown
Member

Pinged the maintainer in the upstream issue -- feel free to ping me if they don't respond in a week or so.

@Neopallium

Copy link
Copy Markdown

This has been fixed.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants