CVE-2012-3358

CVE-2012-3358 describes multiple heap-based buffer overflows in the j2k_read_sot function within OpenJPEG 1.5. This vulnerability allows remote attackers to trigger a denial of service or potentially execute arbitrary code by supplying a malformed JPEG 2000 image with crafted tile numbers or lengths. With a CVSS score of 10.0 (critical), it presents a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. Despite its critical severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion, and it is not listed in CISA's KEV catalog.