I was looking at some image vulnerabilities and came across the fairly new openjpeg vulnerability in JPEG2000 images. It says that: "out of bounds memory can be accessed due to an error in
mcc records parsing".
I wanted to play around with this a bit, but I cannot find anything about what
mcc records are. I am assuming this is metadata information, but I cannot find what exactly I can play with here (what name it has to be and what possible values etc.). I have downloaded "JP2 Meta Editor" so I should be able to edit any metadata.
Can someone point me in the right direction about this?
EDIT: On the github page of OpenJPEG they also keep track of all the bug work and have some POC files they used to fix the problem. Using these anyone can do research on the vulnerability.