openjpeg
14 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2024-56827 | fixed in 2.5.3 | Openjpeg: heap buffer overflow in lib/openjp2/j2k.c | MEDIUM 5.6 | 0.3 % | ||
| CVE-2024-56826 | fixed in 2.5.3 | Openjpeg: heap buffer overflow in bin/common/color.c | MEDIUM 5.6 | 0.3 % | ||
| CVE-2023-39329 | 2.5.0 | Openjpeg: resource exhaustion will occur in the opj_t1_decode_cblks function in the tcd.c | MEDIUM 6.5 | 0.6 % | ||
| CVE-2023-39327 | 2.5.0 | Openjpeg: malicious files can cause the program to enter a large loop | MEDIUM 4.3 | 0.6 % | ||
| CVE-2023-39328 | 2.5.0 | Openjpeg: denail of service via crafted image file | MEDIUM 5.5 | 0.2 % | ||
| CVE-2021-3575 | Afeects v2.4.0 and prior. | A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k file. An attacker c | HIGH 7.8 | 1.5 % | ||
| CVE-2020-27823 | openjpeg 2.4.0 | A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during en | HIGH 7.8 | 1.1 % | ||
| CVE-2020-27824 | openjpeg 2.4.0 | A flaw was found in OpenJPEG’s encoder in the opj_dwt_calc_explicit_stepsizes() function. This flaw allows an attacker who can supply crafte | MEDIUM 5.5 | 1.6 % | ||
| CVE-2020-27814 | before openjpeg 2.4.0 | A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. An attacker could use this flaw to cause an applicat | HIGH 7.8 | 2.1 % | ||
| CVE-2020-27845 | openjpeg 2.4.0 | There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpeg | MEDIUM 5.5 | 1.5 % | ||
| CVE-2020-27844 | openjpeg 2.4.0 | A flaw was found in openjpeg's src/lib/openjp2/t2.c in versions prior to 2.4.0. This flaw allows an attacker to provide crafted input to ope | HIGH 7.8 | 1.4 % | ||
| CVE-2020-27843 | openjpeg 2.4.0 | A flaw was found in OpenJPEG in versions prior to 2.4.0. This flaw allows an attacker to provide specially crafted input to the conversion o | MEDIUM 5.5 | 1.8 % | ||
| CVE-2020-27842 | openjpeg 2.4.0 | There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0. An attacker who is able to provide crafted input to be processed by open | MEDIUM 5.5 | 1.5 % | ||
| CVE-2020-27841 | openjpeg 2.4.0 | There's a flaw in openjpeg in versions prior to 2.4.0 in src/lib/openjp2/pi.c. When an attacker is able to provide crafted input to be proce | MEDIUM 5.5 | 1.5 % |