CVE-2022-1122

CVE-2022-1122 is a denial-of-service vulnerability in openjpeg2 version 2.4.0, specifically in the opj2_decompress program. It affects Debian, Fedora, and UCLouvain distributions of openjpeg. The vulnerability arises when the program fails to allocate a buffer for a large number of input directory filenames, leading to a segmentation fault due to a call to free() on an uninitialized pointer. Rated Medium severity with a CVSS score of 5.5, this vulnerability has a local attack vector and low attack complexity, requiring user interaction. The primary impact is a denial of service, as indicated by the "A:H" in its CVSS vector. Currently, there is no evidence of active exploitation, nor is there any publicly available exploit code in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, consistent with a large percentage of reported vulnerabilities.