-
CVSS Score
-The vulnerable functions were identified based on the CVE description and the GitHub issue report. The CVE description explicitly names opj_calloc and opj_tcd_init_tile as the functions involved in the vulnerability. opj_decompress is mentioned as a tool to trigger the vulnerability. Since no specific patch for CVE-2019-6988 was provided, the analysis relies on the textual descriptions of the vulnerability. The commit provided (51f097e6d5754ddae93e716276fe8176b44ec548) was for a different CVE (CVE-2018-6616) and not directly relevant to the functions described for CVE-2019-6988. Attempts to get more specific commit information for CVE-2019-6988 were unsuccessful within the current toolset capabilities (e.g., get_repo_commits failed).