[SECURITY] Fedora 40 Update: openjpeg2-2.5.3-1.fc40

The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profile-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multiple...

OpenJPEG 安全漏洞

OpenJPEG is a C-based open source JPEG2000 codec open-sourced by Université catholique de Louvain. A security vulnerability exists in OpenJPEG. An attacker exploiting this vulnerability could cause a heap buffer overflow...

CVE-2024-56826: Heap-based Buffer Overflow

A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opjdecompress utility. This can lead to an application crash or other undefined behavior...

OpenJPEG 安全漏洞

OpenJPEG is a C-based open source JPEG2000 codec open-sourced by Université catholique de Louvain. A security vulnerability exists in OpenJPEG. An attacker exploiting this vulnerability could cause a heap buffer overflow...

CVE-2024-56827: Heap-based Buffer Overflow

A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opjdecompress utility. This can lead to an application crash or other undefined behavior...

SUSE CVE-2024-56827

A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opjdecompress utility. This can lead to an application crash or other undefined behavior...

SUSE CVE-2024-56826

A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opjdecompress utility. This can lead to an application crash or other undefined behavior...

PT-2025-3337 · Openjpeg +6 · Openjpeg +6

Name of the Vulnerable Software and Affected Versions: OpenJPEG affected versions not specified Description: A flaw was found in the OpenJPEG project, where a heap buffer overflow condition may be triggered when certain options are specified while using the opj decompress utility. This can lead t...

PT-2025-3336 · Openjpeg +7 · Openjpeg +7

Name of the Vulnerable Software and Affected Versions: OpenJPEG project affected versions not specified Description: A flaw was found in the OpenJPEG project, where a heap buffer overflow condition may be triggered when certain options are specified while using the opj decompress utility. This ca...

opencv:core_fuzzer: Heap-buffer-overflow in opj_jp2_read_header

Detailed Report: https://oss-fuzz.com/testcase?key=5087667039043584 Project: opencv Fuzzing Engine: honggfuzz Fuzz Target: corefuzzer Job Type: honggfuzzasanopencv Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x50400087a124 Crash State: opjjp2readheader...

Fedora 41 : openjpeg (2024-3ecdf562bf)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-3ecdf562bf advisory. Backport fix for CVE-2023-39327. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Huawei EulerOS: Security Advisory for openjpeg2 (EulerOS-SA-2024-2835)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP10 : openjpeg2 (EulerOS-SA-2024-2910)

According to the versions of the openjpeg2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in OpenJPEG similar to CVE-2019-6988.This flaw allows an attacker to bypass existing protections and cause an...

USN-7083-1: OpenJPEG vulnerabilities

It was discovered that OpenJPEG incorrectly handled certain memory operations when using the command line "-ImgDir" in a directory with a large number of files, leading to an integer overflow vulnerability. An attacker could potentially use this issue to cause a denial of service. This issue only...

USN-7083-1 openjpeg2 vulnerabilities

It was discovered that OpenJPEG incorrectly handled certain memory operations when using the command line "-ImgDir" in a directory with a large number of files, leading to an integer overflow vulnerability. An attacker could potentially use this issue to cause a denial of service. This issue only...

PT-2024-40626 · Openjpeg · Openjpeg

Name of the Vulnerable Software and Affected Versions: OpenJPEG affected versions not specified Description: The issue is related to a heap buffer overflow, specifically a WRITE 8 crash type. The crash occurs in the opj j2k read tile header function, which is called by opj j2k decode tiles and...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : OpenJPEG vulnerabilities (USN-7083-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7083-1 advisory. It was discovered that OpenJPEG incorrectly handled certain memory operations when using the...

The vulnerability of the OpenJPEG library for image encoding and decoding, related to uncontrolled resource consumption, allows a perpetrator to cause a service failure.

The vulnerability of the OpenJPEG library for image encoding and decoding is related to uncontrolled resource consumption. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created file...

ROS-20241015-06

A vulnerability in the OpenJPEG image encoding and decoding library is associated with uncontrolled resource consumption. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

USN-7037-1: OpenJPEG vulnerability

It was discovered that OpenJPEG could enter a large loop and continuously print warning messages when given specially crafted input. An attacker could potentially use this issue to cause a denial of service...