Out-of-bounds accesses in the functions pi_next_lrcp pi_next_rlcp pi_next_rpcl pi_next_pcrl pi_next_rpcl and pi_next_cprl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service (application crash).