OP
Product
openjpeg
83
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 28Medium 37Low 1
Watch
Add openjpeg to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-8112 | 8.8 | Jan 28 | opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851 Affected: 2.3.1 |
| CVE-2018-21010 | 8.8 | Sep 5 | OpenJPEG before 2.3.1 has a heap buffer overflow in color_apply_icc_profile in bin/common/color.c Affected: before 2.3.1 |
| CVE-2018-20847 | 8.8 | Jun 26 | An improper computation of p_tx0, p_tx1, p_ty0 and p_ty1 in the function opj_get_encoding_parameters in openjp2/pi.c in OpenJPEG through 2.3.0 can lead to an integer overflow Affected: through 2.3.0 |
| CVE-2018-16376 | 8.8 | Sep 3 | An issue was discovered in OpenJPEG 2.3.0 Affected: 2.3.0 |
| CVE-2018-16375 | 8.8 | Sep 3 | An issue was discovered in OpenJPEG 2.3.0 Affected: 2.3.0 |
| CVE-2016-9580 | 8.8 | Aug 1 | An integer overflow vulnerability was found in tiftoimage function in openjpeg 2.1.2, resulting in heap buffer overflow Affected: 2.1.2 |
| CVE-2016-9581 | 8.8 | Aug 1 | An infinite loop vulnerability in tiftoimage that results in heap buffer overflow in convert_32s_C1P1 was found in openjpeg 2.1.2 Affected: 2.1.2 |
| CVE-2014-0158 | 8.8 | Apr 10 | Heap-based buffer overflow in the JPEG2000 image tile decoder in OpenJPEG before 1.5.2 allows remote attackers to cause a denial of service (application crash) or possibly have… Affected: before 1.5.2 |
| CVE-2017-14164 | 8.8 | Sep 6 | A size-validation issue was discovered in opj_j2k_write_sot in lib/openjp2/j2k.c in OpenJPEG 2.2.0 Affected: before 2.3.0 |
| CVE-2017-14152 | 8.8 | Sep 5 | A mishandled zero case was discovered in opj_j2k_set_cinema_parameters in lib/openjp2/j2k.c in OpenJPEG 2.2.0 Affected: 2.2.0 |
| CVE-2017-14151 | 8.8 | Sep 5 | An off-by-one error was discovered in opj_tcd_code_block_enc_allocate_data in lib/openjp2/tcd.c in OpenJPEG 2.2.0 Affected: 2.2.0 |
| CVE-2017-14041 | 8.8 | Aug 30 | A stack-based buffer overflow was discovered in the pgxtoimage function in bin/jp2/convert.c in OpenJPEG 2.2.0 Affected: 2.2.0 |
| CVE-2017-14040 | 8.8 | Aug 30 | An invalid write access was discovered in bin/jp2/convert.c in OpenJPEG 2.2.0, triggering a crash in the tgatoimage function Affected: 2.2.0 |
| CVE-2017-14039 | 8.8 | Aug 30 | A heap-based buffer overflow was discovered in the opj_t2_encode_packet function in lib/openjp2/t2.c in OpenJPEG 2.2.0 Affected: before 2.3.0 |
| CVE-2016-9573 | 8.1 | Aug 1 | An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2k_to_image tool Affected: 2.1.2 |
| CVE-2021-3575 | 7.8 | Mar 4 | A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k file Affected: through 2.4.0 |
| CVE-2020-27823 | 7.8 | May 13 | A flaw was found in OpenJPEG’s encoder Affected: before 2.4.0 |
| CVE-2020-27814 | 7.8 | Jan 26 | A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files Affected: through 1.5.1; 2.0.0 before 2.4.0 |
| CVE-2020-27844 | 7.8 | Jan 5 | A flaw was found in openjpeg's src/lib/openjp2/t2.c in versions prior to 2.4.0 Affected: before 2.4.0 |
| CVE-2016-9675 | 7.8 | Dec 22 | openjpeg: A heap-based buffer overflow flaw was found in the patch for CVE-2013-6045 Affected: before 1.5.2 |
| CVE-2016-8332 | 7.8 | Oct 28 | A buffer overflow in OpenJPEG 2.1.1 causes arbitrary code execution when parsing a crafted image Affected: 2.1.1 |
| CVE-2016-7163 | 7.8 | Sep 21 | Integer overflow in the opj_pi_create_decode function in pi.c in OpenJPEG allows remote attackers to execute arbitrary code via a crafted JP2 file, which triggers an out-of-bounds… Affected: before 2.2.0 |
| CVE-2020-6851 | 7.5 | Jan 13 | OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation Affected: through 2.3.1 |
| CVE-2018-14423 | 7.5 | Jul 19 | Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in lib/openjp3d/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a… Affected: through 2.3.0 |
| CVE-2016-9114 | 7.5 | Oct 30 | There is a NULL Pointer Access in function imagetopnm of convert.c:1943(jp2) of OpenJPEG 2.1.2 Affected: 2.1.2 |
| CVE-2016-9113 | 7.5 | Oct 30 | There is a NULL pointer dereference in function imagetobmp of convertbmp.c:980 of OpenJPEG 2.1.2 Affected: 2.1.2 |
| CVE-2016-9112 | 7.5 | Oct 29 | Floating Point Exception (aka FPE or divide by zero) in opj_pi_next_cprl function in openjp2/pi.c:523 in OpenJPEG 2.1.2 Affected: 2.1.2 |
| CVE-2016-7445 | 7.5 | Oct 3 | convert.c in OpenJPEG before 2.1.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors involving the variable s Affected: through 2.1.1 |
Showing 28
