AZL-75384 CVE-2026-24811 affecting package openjpeg2 2.3.1-12

Vulnerability in root-project root builtins/zlib modules. This vulnerability is associated with program files inffast.C. This issue affects root...

AZL-75363 CVE-2026-24811 affecting package openjpeg2 2.3.1-12

Vulnerability in root-project root builtins/zlib modules. This vulnerability is associated with program files inffast.C. This issue affects root...

AZL-43495 CVE-2023-39329 affecting package openjpeg2 2.3.1-12

A flaw was found in OpenJPEG. A resource exhaustion can occur in the opjt1decodecblks function in tcd.c through a crafted image file, causing a denial of service...

AZL-44391 CVE-2023-3618 affecting package openjpeg2 2.3.1-12

A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in the Fax3Encode function in libtiff/tiffax3.c, resulting in a denial of service...

AZL-45054 CVE-2020-19144 affecting package openjpeg2 2.3.1-12

Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the 'in TIFFmemcpy' funtion in the component 'tifunix.c'...

AZL-44076 CVE-2018-16435 affecting package openjpeg2 2.3.1-12

Little CMS aka Little Color Management System 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile...

AZL-43813 CVE-2015-2158 affecting package openjpeg2 2.3.1-12

Off-by-one error in the pngcrushmeasureidat function in pngcrush.c in pngcrush before 1.7.84 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PNG file...

AZL-44601 CVE-2016-10165 affecting package openjpeg2 2.3.1-12

The TypeMLURead function in cmstypes.c in Little CMS aka lcms2 allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read...

AZL-45150 CVE-2017-5563 affecting package openjpeg2 2.3.1-12

LibTIFF version 4.0.7 is vulnerable to a heap-based buffer over-read in tiflzw.c resulting in DoS or code execution via a crafted bmp image to tools/bmp2tiff...