Vulnerability Spotlight: Kakadu Software SDK ATK marker code execution vulnerability
Summary: Cisco Talos discovered an exploitable heap overflow in the `derive_taps_and_gains` function in `kdu_v7ar.dll` of Kakadu Software SDK 7.10.2, which can be triggered when a user opens a specially crafted jp2 file. Successful exploitation could allow an attacker to remotely execute code on the server, and Cisco Talos worked with Kakadu under its coordinated disclosure policy to resolve the issue and release an update.
What's compelling: The attack path is a single malformed jp2 file opened by a user, so any application built on Kakadu SDK 7.10.2 inherits the exposure until the update is applied. Snort rules 52020 and 52021 are available for detection.
Read the original at Cisco Talos ↗
- Topics
- Cloud Security
- Related
- Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs Cyber Risks · Nov 12, 2026New Falcon Cloud Security Innovations Secure the Cloud AI Runs On Cyber Risks · Nov 04, 2026