CVE-2019-5154

CVE-2019-5154 is a high-severity heap overflow vulnerability affecting LEADTOOLS 20.0.2019.3.15, specifically within its JPEG2000 parsing functionality. An attacker can exploit this by crafting a malicious J2K image file, leading to an out-of-bounds null byte write in a heap buffer. This could potentially result in remote code execution, with a CVSS score of 8.8. Despite its high severity and potential for significant impact (confidentiality, integrity, availability), there is no evidence of active exploitation, public exploit code (Metasploit, ExploitDB), or significant community discussion or media coverage.