The vulnerability of the OpenJPEG library for image encoding and decoding, related to buffer overflow in dynamic memory, allows attackers to execute arbitrary code.

The vulnerability of the OpenJPEG library for image encoding and decoding is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the OpenJPEG library for image encoding and decoding, related to buffer overflow in dynamic memory, allows attackers to execute arbitrary code.

The vulnerability of the OpenJPEG library for image encoding and decoding is related to a buffer overflow in the dynamic memory of the opjj2kaddtlmarker function in src/lib/openjp2/j2k.c. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

EulerOS 2.0 SP12 : openjpeg2 (EulerOS-SA-2025-1302)

According to the versions of the openjpeg2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the...

Medium: openjpeg2

Issue Overview: openjpeg: heap buffer overflow in lib/openjp2/j2k.c CVE-2024-56827 Affected Packages: openjpeg2 Issue Correction: Run dnf update openjpeg2 --releasever 2023.6.20250303 or dnf update --advisory ALAS2023-2025-875 --releasever 2023.6.20250303 to update your system. More information o...

Linux Distros Unpatched Vulnerability : CVE-2024-56826

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opjdecompress...

Linux Distros Unpatched Vulnerability : CVE-2024-56827

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opjdecompress...

Linux Distros Unpatched Vulnerability : CVE-2023-39328

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in OpenJPEG similar to CVE-2019-6988. This flaw allows an attacker to bypass existing protections and cause an application crash throu...

Linux Distros Unpatched Vulnerability : CVE-2021-3575

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420torgb when decompressing a crafted .j2k file. An attacker could use this to execu...

Linux Distros Unpatched Vulnerability : CVE-2023-39327

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the...

Linux Distros Unpatched Vulnerability : CVE-2013-6887

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenJPEG 1.5.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger NULL pointer dereferences, division-by-zero, and other...

Linux Distros Unpatched Vulnerability : CVE-2016-10506

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Division-by-zero vulnerabilities in the functions opjpinextcprl, opjpinextpcrl, and opjpinextrpcl in pi.c in OpenJPEG before 2.2.0 allow remote attackers to cau...

Linux Distros Unpatched Vulnerability : CVE-2018-20845

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Division-by-zero vulnerabilities in the functions pinextpcrl, pinextcprl, and pinextrpcl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cau...

Linux Distros Unpatched Vulnerability : CVE-2021-29338

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service DoS. This occurs when the attacker uses the...

Linux Distros Unpatched Vulnerability : CVE-2017-14040

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An invalid write access was discovered in bin/jp2/convert.c in OpenJPEG 2.2.0, triggering a crash in the tgatoimage function. The vulnerability may lead to remo...

Linux Distros Unpatched Vulnerability : CVE-2017-14152

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A mishandled zero case was discovered in opjj2ksetcinemaparameters in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, whic...

Linux Distros Unpatched Vulnerability : CVE-2019-6988

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in OpenJPEG 2.3.0. It allows remote attackers to cause a denial of service attempted excessive memory allocation in opjcalloc in...

Linux Distros Unpatched Vulnerability : CVE-2018-21010

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenJPEG before 2.3.1 has a heap buffer overflow in colorapplyiccprofile in bin/common/color.c. CVE-2018-21010 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2016-10505

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NULL pointer dereference vulnerabilities in the imagetopnm function in convert.c, sycc444torgb function in color.c, coloresycctorgb function in color.c, and...

Linux Distros Unpatched Vulnerability : CVE-2017-12982

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The bmpreadinfoheader function in bin/jp2/convertbmp.c in OpenJPEG 2.2.0 does not reject headers with a zero biBitCount, which allows remote attackers to cause ...

Linux Distros Unpatched Vulnerability : CVE-2020-15389

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jp2/opjdecompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid and invalid files in a directory operated on...