OP
Product
openjpeg
by uclouvain · last CVE Apr 13, 2026
83
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 28Medium 37Low 1
Watch

Add openjpeg to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-54874
9.8
1%
Aug 5
OpenJPEG is an open-source JPEG 2000 codec
Affected: through 2.5.3
CVE-2018-7648
9.8
2%
Mar 2
An issue was discovered in mj2/opj_mj2_extract.c in OpenJPEG 2.3.0
Affected: 2.3.0
CVE-2017-17480
9.8
5%
Dec 8
In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtovolume function in jp3d/convert.c
Affected: 2.3.0
CVE-2017-17479
9.8
4%
Dec 8
In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtoimage function in jpwl/convert.c
Affected: 2.3.0
CVE-2015-8871
9.8
3%
Sep 21
Use-after-free vulnerability in the opj_j2k_write_mco function in j2k.c in OpenJPEG before 2.1.1 allows remote attackers to have unspecified impact via unknown vectors
Affected: through 2.1.0
CVE-2020-8112
8.8
4%
Jan 28
opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851
Affected: 2.3.1
CVE-2018-21010
8.8
2%
Sep 5
OpenJPEG before 2.3.1 has a heap buffer overflow in color_apply_icc_profile in bin/common/color.c
Affected: before 2.3.1
CVE-2018-20847
8.8
2%
Jun 26
An improper computation of p_tx0, p_tx1, p_ty0 and p_ty1 in the function opj_get_encoding_parameters in openjp2/pi.c in OpenJPEG through 2.3.0 can lead to an integer overflow
Affected: through 2.3.0
CVE-2018-16376
8.8
3%
Sep 3
An issue was discovered in OpenJPEG 2.3.0
Affected: 2.3.0
CVE-2018-16375
8.8
2%
Sep 3
An issue was discovered in OpenJPEG 2.3.0
Affected: 2.3.0
CVE-2016-9580
8.8
2%
Aug 1
An integer overflow vulnerability was found in tiftoimage function in openjpeg 2.1.2, resulting in heap buffer overflow
Affected: 2.1.2
CVE-2016-9581
8.8
2%
Aug 1
An infinite loop vulnerability in tiftoimage that results in heap buffer overflow in convert_32s_C1P1 was found in openjpeg 2.1.2
Affected: 2.1.2
CVE-2014-0158
8.8
2%
Apr 10
Heap-based buffer overflow in the JPEG2000 image tile decoder in OpenJPEG before 1.5.2 allows remote attackers to cause a denial of service (application crash) or possibly have…
Affected: before 1.5.2
CVE-2017-14164
8.8
5%
Sep 6
A size-validation issue was discovered in opj_j2k_write_sot in lib/openjp2/j2k.c in OpenJPEG 2.2.0
Affected: before 2.3.0
CVE-2017-14152
8.8
5%
Sep 5
A mishandled zero case was discovered in opj_j2k_set_cinema_parameters in lib/openjp2/j2k.c in OpenJPEG 2.2.0
Affected: 2.2.0
CVE-2017-14151
8.8
5%
Sep 5
An off-by-one error was discovered in opj_tcd_code_block_enc_allocate_data in lib/openjp2/tcd.c in OpenJPEG 2.2.0
Affected: 2.2.0
CVE-2017-14041
8.8
6%
Aug 30
A stack-based buffer overflow was discovered in the pgxtoimage function in bin/jp2/convert.c in OpenJPEG 2.2.0
Affected: 2.2.0
CVE-2017-14040
8.8
5%
Aug 30
An invalid write access was discovered in bin/jp2/convert.c in OpenJPEG 2.2.0, triggering a crash in the tgatoimage function
Affected: 2.2.0
CVE-2017-14039
8.8
4%
Aug 30
A heap-based buffer overflow was discovered in the opj_t2_encode_packet function in lib/openjp2/t2.c in OpenJPEG 2.2.0
Affected: before 2.3.0
CVE-2016-9573
8.1
2%
Aug 1
An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2k_to_image tool
Affected: 2.1.2
CVE-2021-3575
7.8
2%
Mar 4
A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k file
Affected: through 2.4.0
CVE-2020-27823
7.8
1%
May 13
A flaw was found in OpenJPEG’s encoder
Affected: before 2.4.0
CVE-2020-27814
7.8
2%
Jan 26
A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files
Affected: through 1.5.1; 2.0.0 before 2.4.0
CVE-2020-27844
7.8
1%
Jan 5
A flaw was found in openjpeg's src/lib/openjp2/t2.c in versions prior to 2.4.0
Affected: before 2.4.0
CVE-2016-9675
7.8
2%
Dec 22
openjpeg: A heap-based buffer overflow flaw was found in the patch for CVE-2013-6045
Affected: before 1.5.2
CVE-2016-8332
7.8
3%
Oct 28
A buffer overflow in OpenJPEG 2.1.1 causes arbitrary code execution when parsing a crafted image
Affected: 2.1.1
CVE-2016-7163
7.8
7%
Sep 21
Integer overflow in the opj_pi_create_decode function in pi.c in OpenJPEG allows remote attackers to execute arbitrary code via a crafted JP2 file, which triggers an out-of-bounds…
Affected: before 2.2.0
CVE-2020-6851
7.5
5%
Jan 13
OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation
Affected: through 2.3.1
CVE-2018-14423
7.5
3%
Jul 19
Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in lib/openjp3d/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a…
Affected: through 2.3.0
CVE-2016-9114
7.5
3%
Oct 30
There is a NULL Pointer Access in function imagetopnm of convert.c:1943(jp2) of OpenJPEG 2.1.2
Affected: 2.1.2
CVE-2016-9113
7.5
3%
Oct 30
There is a NULL pointer dereference in function imagetobmp of convertbmp.c:980 of OpenJPEG 2.1.2
Affected: 2.1.2
CVE-2016-9112
7.5
3%
Oct 29
Floating Point Exception (aka FPE or divide by zero) in opj_pi_next_cprl function in openjp2/pi.c:523 in OpenJPEG 2.1.2
Affected: 2.1.2
CVE-2016-7445
7.5
4%
Oct 3
convert.c in OpenJPEG before 2.1.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors involving the variable s
Affected: through 2.1.1
CVE-2025-50952
6.5
0%
Aug 7
openjpeg v 2.5.0 was discovered to contain a NULL pointer dereference via the component /openjp2/dwt.c
Affected: 2.5.0
CVE-2023-39329
6.5
1%
Jul 13
A flaw was found in OpenJPEG
Affected: 2.0; 2.5.0
CVE-2020-15389
6.5
3%
Jun 29
jp2/opj_decompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid and invalid files in a directory operated on by the…
Affected: through 2.3.1
CVE-2018-20846
6.5
2%
Jun 26
Out-of-bounds accesses in the functions pi_next_lrcp, pi_next_rlcp, pi_next_rpcl, pi_next_pcrl, pi_next_rpcl, and pi_next_cprl in openmj2/pi.c in OpenJPEG through 2.3.0 allow…
Affected: through 2.3.0
CVE-2018-20845
6.5
2%
Jun 26
Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial…
Affected: through 2.3.0
CVE-2019-6988
6.5
2%
Jan 28
An issue was discovered in OpenJPEG 2.3.0
Affected: 2.3.0
CVE-2018-18088
6.5
2%
Oct 9
OpenJPEG 2.3.0 has a NULL pointer dereference for "red" in the imagetopnm function of jp2/convert.c
Affected: 2.3.0
CVE-2016-9572
6.5
2%
Aug 1
A NULL pointer dereference flaw was found in the way openjpeg 2.1.2 decoded certain input images
Affected: 2.1.2
CVE-2018-5785
6.5
2%
Jan 19
In OpenJPEG 2.3.0, there is an integer overflow caused by an out-of-bounds left shift in the opj_j2k_setup_encoder function (openjp2/j2k.c)
Affected: 2.3.0
CVE-2018-5727
6.5
2%
Jan 16
In OpenJPEG 2.3.0, there is an integer overflow vulnerability in the opj_t1_encode_cblks function (openjp2/t1.c)
Affected: 2.3.0
CVE-2015-1239
6.5
1%
Oct 18
Double free vulnerability in the j2k_read_ppm_v3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service…
Affected: before 2.1.1
CVE-2016-10507
6.5
2%
Aug 30
Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service (heap-based buffer…
Affected: through 2.1.2
CVE-2016-10506
6.5
3%
Aug 30
Division-by-zero vulnerabilities in the functions opj_pi_next_cprl, opj_pi_next_pcrl, and opj_pi_next_rpcl in pi.c in OpenJPEG before 2.2.0 allow remote attackers to cause a…
Affected: through 2.1.2
CVE-2016-10505
6.5
2%
Aug 30
NULL pointer dereference vulnerabilities in the imagetopnm function in convert.c, sycc444_to_rgb function in color.c, color_esycc_to_rgb function in color.c, and sycc422_to_rgb…
Affected: through 2.1.2
CVE-2016-10504
6.5
8%
Aug 30
Heap-based buffer overflow vulnerability in the opj_mqc_byteout function in mqc.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service (application crash)…
Affected: through 2.1.2
CVE-2016-9117
6.5
3%
Oct 30
NULL Pointer Access in function imagetopnm of convert.c(jp2):1289 in OpenJPEG 2.1.2
Affected: 2.1.2
CVE-2016-9116
6.5
2%
Oct 30
NULL Pointer Access in function imagetopnm of convert.c:2226(jp2) in OpenJPEG 2.1.2
Affected: 2.1.2
Page 1 of 2 · 83 total