CVE-2021-29338

Integer Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service (DoS). This occurs when the attacker uses the command line option "-ImgDir" on a directory that contains 1048576 files.

• CWE-190

• https://github.com/uclouvain/openjpeg/issues/1338Exploit, Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/04/msg00006.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZ54FGM2IGAP4AWSJ22JKHOPHCR3FGYU/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QB6AI7CWXWMEDZIQY4LQ6DMIEXMDOHUP/
• https://security.gentoo.org/glsa/202209-04Third Party Advisory
• https://github.com/uclouvain/openjpeg/issues/1338Exploit, Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/04/msg00006.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2025/04/msg00002.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZ54FGM2IGAP4AWSJ22JKHOPHCR3FGYU/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QB6AI7CWXWMEDZIQY4LQ6DMIEXMDOHUP/
• https://security.gentoo.org/glsa/202209-04Third Party Advisory

Published

Apr 14, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-29326OpenSource Moddable v10.5.0 was discovered to contain a heap…7.8
• CVE-2021-29327OpenSource Moddable v10.5.0 was discovered to contain a heap…7.8
• CVE-2021-29328OpenSource Moddable v10.5.0 was discovered to contain buffer…7.1
• CVE-2021-29329OpenSource Moddable v10.5.0 was discovered to contain a stac…7.8
• CVE-2021-29334An issue was discovered in JIZHI CMS 1.9.4. There is a CSRF …8.8
• CVE-2021-29337MODAPI.sys in MSI Dragon Center 2.0.104.0 allows low-privile…7.8
• CVE-2021-29343Ovidentia CMS 6.x contains a SQL injection vulnerability in …5.4
• CVE-2021-29349Mahara 20.10 is affected by Cross Site Request Forgery (CSRF…6.5
• CVE-2021-29350SQL injection in the getip function in conn/function.php in …7.2
• CVE-2021-29357The ECT Provider component in OutSystems Platform Server 10 …8.6
• CVE-2021-29358A buffer overflow vulnerability in FORMATS!ReadPVR_W+0xfa of…5.5
• CVE-2021-29360A buffer overflow vulnerability in FORMATS!Read_Utah_RLE+0x3…7.8