| This vulnerability is an instance of an information disclosure vulnerability in the JPEG 2000 parser engine. The vulnerability is caused by a crafted PDF file with embedded malformed JPEG 2000 stream data. Specifically, the malformed segment exists within JP2Header container, when parsing data beyond color palette tag. It causes an out of bounds memory access, which sometimes triggers access violation exception. Attackers can exploit the vulnerability by using the out of bounds access for information leak attacks. |
