### [CVE-2018-5727](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5727) ![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue) ![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue) ![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen) ### Description In OpenJPEG 2.3.0, there is an integer overflow vulnerability in the opj_t1_encode_cblks function (openjp2/t1.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. ### POC #### Reference - https://github.com/uclouvain/openjpeg/issues/1053 #### Github - https://github.com/ARPSyndicate/cvemon - https://github.com/andir/nixos-issue-db-example