CVE ID:	CVE-2022-1122
Description:	A flaw was found in the opj2_decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free() on an uninitialized pointer, leading to a segmentation fault and a denial of service.
Test IDs:	1.3.6.1.4.1.25623.1.0.820216   1.3.6.1.4.1.25623.1.1.2.2022.2393   1.3.6.1.4.1.25623.1.0.820222   1.3.6.1.4.1.25623.1.0.820208   1.3.6.1.4.1.25623.1.1.2.2022.2357   1.3.6.1.4.1.25623.1.1.10.2022.0129   1.3.6.1.4.1.25623.1.1.2.2022.2140   1.3.6.1.4.1.25623.1.1.2.2022.2095   1.3.6.1.4.1.25623.1.0.892975   1.3.6.1.4.1.25623.1.1.2.2022.1974   1.3.6.1.4.1.25623.1.1.2.2022.2165   1.3.6.1.4.1.25623.1.1.2.2022.2115   1.3.6.1.4.1.25623.1.1.2.2022.2004   1.3.6.1.4.1.25623.1.0.820224   1.3.6.1.4.1.25623.1.0.820631   1.3.6.1.4.1.25623.1.1.2.2022.1941
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2022-1122 FEDORA-2022-2d112d4480 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MIWSQFQWXDU4MT3XTVAO6HC7TVL3NHS7/ FEDORA-2022-9515529c96 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ROSN5NRUFOH7HGLJ4ZSKPGAKLFXJALW4/ FEDORA-2022-975e21444a https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RMKBAMK2CAM5TMC5TODKVCE5AAPTD5YV/ GLSA-202209-04 https://security.gentoo.org/glsa/202209-04 [debian-lts-announce] 20220410 [SECURITY] [DLA 2975-1] openjpeg2 security update https://lists.debian.org/debian-lts-announce/2022/04/msg00006.html https://github.com/uclouvain/openjpeg/issues/1368 https://github.com/uclouvain/openjpeg/issues/1368