OP
Product
openjpeg
83
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 28Medium 37Low 1
Watch
Add openjpeg to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-9115 | 6.5 | Oct 30 | Heap Buffer Over-read in function imagetotga of convert.c(jp2):942 in OpenJPEG 2.1.2 Affected: 2.1.2 |
| CVE-2016-1924 | 6.5 | Jan 27 | The opj_tgt_reset function in OpenJpeg 2016.1.18 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG 2000 image Affected: through 2.1.0 |
| CVE-2016-1923 | 6.5 | Jan 27 | Heap-based buffer overflow in the opj_j2k_update_image_data function in OpenJpeg 2016.1.18 allows remote attackers to cause a denial of service (out-of-bounds read and application… Affected: 2.1.0 |
| CVE-2023-39328 | 5.5 | Jul 9 | A vulnerability was found in OpenJPEG similar to CVE-2019-6988 Affected: 2.0; 2.5.0 |
| CVE-2022-1122 | 5.5 | Mar 29 | A flaw was found in the opj2_decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files Affected: 2.4.0 |
| CVE-2020-27824 | 5.5 | May 13 | A flaw was found in OpenJPEG’s encoder in the opj_dwt_calc_explicit_stepsizes() function Affected: before 2.4.0 |
| CVE-2021-29338 | 5.5 | Apr 14 | Integer Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service (DoS) Affected: 2.4.0 |
| CVE-2020-27845 | 5.5 | Jan 5 | There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0 Affected: before 2.4.0 |
| CVE-2020-27843 | 5.5 | Jan 5 | A flaw was found in OpenJPEG in versions prior to 2.4.0 Affected: before 2.4.0 |
| CVE-2020-27842 | 5.5 | Jan 5 | There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0 Affected: before 2.4.0 |
| CVE-2020-27841 | 5.5 | Jan 5 | There's a flaw in openjpeg in versions prior to 2.4.0 in src/lib/openjp2/pi.c Affected: before 2.4.0 |
| CVE-2016-3182 | 5.5 | Feb 20 | The color_esycc_to_rgb function in bin/common/color.c in OpenJPEG before 2.1.1 allows attackers to cause a denial of service (memory corruption) via a crafted jpeg 2000 file Affected: before 2.1.1 |
| CVE-2019-12973 | 5.5 | Jun 26 | In OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c Affected: 2.3.1 |
| CVE-2018-6616 | 5.5 | Feb 4 | In OpenJPEG 2.3.0, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c Affected: 2.3.0 |
| CVE-2017-12982 | 5.5 | Aug 21 | The bmp_read_info_header function in bin/jp2/convertbmp.c in OpenJPEG 2.2.0 does not reject headers with a zero biBitCount, which allows remote attackers to cause a denial of… Affected: before 2.3.0 |
| CVE-2016-4797 | 5.5 | Feb 3 | Divide-by-zero vulnerability in the opj_tcd_init_tile function in tcd.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (application crash) via a… Affected: through 2.1.0 |
| CVE-2016-4796 | 5.5 | Feb 3 | Heap-based buffer overflow in the color_cmyk_to_rgb in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (crash) via a crafted .j2k file Affected: through 2.1.0 |
| CVE-2016-3183 | 5.5 | Feb 3 | The sycc422_t_rgb function in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted jpeg2000 file Affected: through 2.1.0 |
| CVE-2016-9118 | 5.3 | Oct 30 | Heap Buffer Overflow (WRITE of size 4) in function pnmtoimage of convert.c:1719 in OpenJPEG 2.1.2 Affected: 2.1.2 |
| CVE-2023-39327 | 4.3 | Jul 13 | A flaw was found in OpenJPEG Affected: 2.0; 2.5.0 |
| CVE-2026-6192 | 3.3 | Apr 13 | uclouvain openjpeg pi.c opj_pi_initialise_encode integer overflow Affected: 2.5.0; 2.5.1; 2.5.2; 2.5.3; 2.5.4 |
| CVE-2013-6053 | – | Apr 27 | OpenJPEG 1.5.1 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based out-of-bounds read Affected: 1.5.1 |
| CVE-2013-6887 | – | Apr 27 | OpenJPEG 1.5.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger NULL pointer dereferences, division-by-zero, and other errors Affected: 1.5.1 |
| CVE-2013-4290 | – | Apr 18 | Stack-based buffer overflow in OpenJPEG before 1.5.2 allows remote attackers to have unspecified impact via unknown vectors to (1) lib/openjp3d/opj_jp3d_compress.c, (2)… Affected: through 1.5.1; 1.3; 1.4; 1.5 |
| CVE-2013-4289 | – | Apr 18 | Multiple integer overflows in lib/openjp3d/jp3d.c in OpenJPEG before 1.5.2 allow remote attackers to have unspecified impact and vectors, which trigger a heap-based buffer… Affected: through 1.5.1; 1.3; 1.4; 1.5 |
| CVE-2013-6054 | – | Dec 12 | Heap-based buffer overflow in OpenJPEG 1.3 has unspecified impact and remote vectors, a different vulnerability than CVE-2013-6045 Affected: through 1.3 |
| CVE-2013-6052 | – | Dec 12 | OpenJPEG 1.3 and earlier allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based out-of-bounds read Affected: through 1.3 |
| CVE-2013-6045 | – | Dec 12 | Multiple heap-based buffer overflows in OpenJPEG 1.3 and earlier might allow remote attackers to execute arbitrary code via unspecified vectors Affected: through 1.3 |
| CVE-2013-1447 | – | Dec 12 | OpenJPEG 1.3 and earlier allows remote attackers to cause a denial of service (memory consumption or crash) via unspecified vectors related to NULL pointer dereferences,… Affected: through 1.3 |
| CVE-2012-3535 | – | Sep 5 | Heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted… Affected: through 1.5; 1.3; 1.4 |
| CVE-2012-3358 | – | Jul 18 | Multiple heap-based buffer overflows in the j2k_read_sot function in j2k.c in OpenJPEG 1.5 allow remote attackers to cause a denial of service (application crash) and possibly… Affected: 1.5 |
| CVE-2009-5030 | – | Jul 18 | The tcd_free_encode function in tcd.c in OpenJPEG 1.3 through 1.5 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via… Affected: 1.3; 1.4; 1.5 |
| CVE-2012-1499 | – | Apr 11 | The JPEG 2000 codec (jp2.c) in OpenJPEG before 1.5 allows remote attackers to execute arbitrary code via a crafted palette index in a CMAP record of a JPEG image, which triggers… Affected: through 1.4; 1.3 |