cve-2025-54874-poc

Reference https://github.com/uclouvain/openjpeg/pull/1573 https://www.cvedetails.com/cve/CVE-2025-54874/ https://securitylab.github.com/advisories/GHSL-2025-057OpenCV/ Test Env openjpeg-2.5.1 Linux 6.10.14-linuxkit x8664 GNU/Linux Description the function call chain is: opjreadheader →...

Rocky Linux 8 [CIQ] Security Update: openjpeg2 / openjpeg2-debuginfo / openjpeg2-debugsource / etc Multiple Vulnerabilities (crlsa-2021_4251)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20214251 advisory. openjpeg: use-after-free and double-free via a mix of valid and invalid files in a directory operated on by the decompressor CVE-2020-15389 openjpeg:...

openjpeg-2.3.0_CVE-2020-27824

OPENJPEG Library and Applications What is OpenJPEG ? OpenJPEG is an open-source JPEG 2000 codec written in C language. It has been developed in order to promote the use of JPEG 2000, a still-image compression standard from the Joint Photographic Experts Group JPEG. Since April 2015, it is...

AlmaLinux 9.2 [TuxCare] Security Update: openjpeg2 / openjpeg2-devel / openjpeg2-devel-docs / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1779825752)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1779825752 advisory. - A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified whi...

SUSE-SU-2026:4378-1 Security update for libheif

This update for libheif fixes the following issues: - AV1/libaom path allows allocation before libheif rejects mismatched coded dimensions bsc1281953. - Caller-configured security limits not enforced for MINI-box parsing bsc1281952. - Heap out-of-bounds read in libheif alpha compositing via...

Astra Linux – Vulnerability in openjpeg2

There is a flaw in the src/lib/openjp2/pi.c file of openjpeg in versions prior to 2.4.0. If an attacker can provide untrusted input to openjpeg’s conversion/encoding functionality, they could cause an out-of-bounds read. The most significant impact of this flaw is the application’s availability...

Astra Linux – Vulnerability in openjpeg2

A flaw was discovered in OpenJPEG’s encoder. This flaw allows an attacker to provide specially crafted x,y offset inputs to OpenJPEG during encoding. The greatest threat of this vulnerability is to confidentiality, integrity, and system availability...

Astra Linux – Vulnerability in openjpeg2

A flaw was discovered in the OpenJPEG project. A heap buffer overflow condition may occur when certain options are specified while using the opjdecompress utility. This could lead to an application crashing or other undefined behaviors...

Astra Linux – Vulnerability in openjpeg2

A flaw was discovered in OpenJPEG. Pictures constructed maliciously can cause the program to enter a large loop and continuously print warning messages on the terminal...

Astra Linux – Vulnerability in openjpeg2

A flaw was discovered in OpenJPEG’s encoder, specifically in the opjdwtcalcexplicitstepsizes function. This flaw allows an attacker who can provide crafted inputs for the decomposition levels to cause a buffer overflow. The greatest threat of this vulnerability is to system availability...

Astra Linux – Vulnerability in openjpeg2

Integer overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service DoS attack. This occurs when the attacker uses the command line option "-ImgDir" on a directory that contains 1048576 files...

Astra Linux – Vulnerability in openjpeg2

A flaw was discovered in OpenJPEG in versions prior to 2.4.0. This flaw allows an attacker to provide specially crafted input to the conversion or encoding functionality, resulting in an out-of-bounds read. The greatest threat from this vulnerability is system availability...

Astra Linux – Vulnerability in openjpeg2

In OpenJPEG 2.3.1, there is excessive iteration in the opjt1encodecblks function of openjp2/t1.c. Remote attackers could exploit this vulnerability to cause a denial of service by using a crafted BMP file. This issue is similar to CVE-2018-6616...

Astra Linux – Vulnerability in openjpeg2

There is a flaw in OpenJPEG’s T2 encoder in versions prior to 2.4.0. An attacker who can provide crafted input for OpenJPEG to process may cause a null pointer dereferencing. The most significant impact of this flaw is the availability of the application...

Astra Linux – Vulnerability in openjpeg2

A vulnerability was identified in uclouvain openjpeg up to version 2.5.4. This affects the function opjpiinitialiseencode in the library src/lib/openjp2/pi.c. The manipulation leads to integer overflow. The attack must be carried out locally. The exploit is publicly available and may be used. The...

Astra Linux – Vulnerability in openjpeg2

OpenJPEG version 2.3.1 has a heap-based buffer overflow issue in the opjt1clbldecodeprocessor function in openjp2/t1.c, due to the lack of validation for the opjj2kupdateimagedimensions function...

Astra Linux – Vulnerability in openjpeg2

In OpenJPEG version 2.3.1, the jp2/opjdecompress.c file contains a use-after-free issue. This issue can occur if there is a mix of valid and invalid files in a directory that is processed by the decompressor. It is also possible for a double free to occur. This issue is related to calling...

Astra Linux – Vulnerability in openjpeg2

A flaw was discovered in the opj2decompress program within openjpeg2 2.4.0, particularly in its handling of an input directory containing a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free on an uninitialized pointer, resulting...

Astra Linux – Vulnerability in openjpeg2

In OpenJPEG 2.3.1 through 2020-01-28, opjt1clbldecodeprocessor in openjp2/t1.c has a heap-based buffer overflow in the qmfbid==1 case. This is a different issue than CVE-2020-6851...

Astra Linux – Vulnerability in openjpeg2

There is a flaw in openjpeg in versions prior to 2.4.0, located in src/lib/openjp2/pi.c. When an attacker can provide crafted input that is processed by the openjpeg encoder, it may lead to an out-of-bounds read. The most significant impact of this flaw is the application’s availability...