---
id: 1080
title: "CVR: The Mines of Kakadûm"
source_domain: bughunters.google.com
source_url: "https://bughunters.google.com/blog/cvr-the-mines-of-kakad%C3%83%C2%BBm"
published_at: "2024-09-10 00:00"
tags: ["cloud", "rce", "vulnerability-research", "memory-corruption", "image-parsing", "google", "kakadu", "jpeg2000"]
phying_url: "https://phying.com/item/1080"
lang: en
---

# CVR: The Mines of Kakadûm

## Summary

Google's CVR team details memory corruption bugs in the Kakadu JPEG 2000 image library and shows how 'Conditional Corruption' overcomes environment constraints to achieve remote code execution.

## Intelligence Metadata

- **Sources:** bughunters.google.com
- **Published:** 2024-09-10 00:00
- **Original:** https://bughunters.google.com/blog/cvr-the-mines-of-kakad%C3%83%C2%BBm
- **Phying News:** https://phying.com/item/1080