CVE-2026-107080

A flaw was found in OpenJPEG. An out-of-bounds read and write vulnerability exists in the encoder's discrete wavelet transform processing when handling images with specific tile geometries. An attacker who can supply crafted encoding parameters could exploit this flaw to cause heap memory...

CVE-2026-107080

OpenJPEG 2.4.0 through 2.5.4, and git master through commit 8314119b, contains an out-of-bounds read and write in opjdwtencodeanddeinterleavev in src/lib/openjp2/dwt.c. This allows an attacker to cause a denial of service...

cve-2025-54874-poc

Reference https://github.com/uclouvain/openjpeg/pull/1573 https://www.cvedetails.com/cve/CVE-2025-54874/ https://securitylab.github.com/advisories/GHSL-2025-057OpenCV/ Test Env openjpeg-2.5.1 Linux 6.10.14-linuxkit x8664 GNU/Linux Description the function call chain is: opjreadheader →...

openjpeg-2.3.0_CVE-2020-27824

OPENJPEG Library and Applications What is OpenJPEG ? OpenJPEG is an open-source JPEG 2000 codec written in C language. It has been developed in order to promote the use of JPEG 2000, a still-image compression standard from the Joint Photographic Experts Group JPEG. Since April 2015, it is...

EUVD-2026-109960

OpenJPEG 2.4.0 through 2.5.4, and git master through commit 8314119b, contains an out-of-bounds read and write in opjdwtencodeanddeinterleavev in src/lib/openjp2/dwt.c. This allows an attacker to cause a denial of service...

CVE-2026-107080

The OpenJPEG library (versions 2.4.0 through 2.5.4 and git master through commit 8314119b ) is vulnerable to an out-of-bounds read and write in the opj_dwt_encode_and_deinterleave_v() function located in src/lib/openjp2/dwt.c. An attacker can exploit this flaw to cause a denial of service . No sp...

CVE-2026-107080

OpenJPEG 2.4.0 through 2.5.4, and git master through commit 8314119b, contains an out-of-bounds read and write in opjdwtencodeanddeinterleavev in src/lib/openjp2/dwt.c. This allows an attacker to cause a denial of service...

CVE-2026-107080

OpenJPEG 2.4.0 through 2.5.4, and git master through commit 8314119b, contains an out-of-bounds read and write in opjdwtencodeanddeinterleavev in src/lib/openjp2/dwt.c. This allows an attacker to cause a denial of service...

CVE-2026-107080

OpenJPEG 2.4.0 through 2.5.4, and git master through commit 8314119b, contains an out-of-bounds read and write in opjdwtencodeanddeinterleavev in src/lib/openjp2/dwt.c. This allows an attacker to cause a denial of service...

Astra Linux – Vulnerability in openjpeg2

In OpenJPEG 2.3.1, there is excessive iteration in the opjt1encodecblks function of openjp2/t1.c. Remote attackers could exploit this vulnerability to cause a denial of service by using a crafted BMP file. This issue is similar to CVE-2018-6616...

Astra Linux – Vulnerability in openjpeg2

There is a flaw in the src/lib/openjp2/pi.c file of openjpeg in versions prior to 2.4.0. If an attacker can provide untrusted input to openjpeg’s conversion/encoding functionality, they could cause an out-of-bounds read. The most significant impact of this flaw is the application’s availability...

Astra Linux – Vulnerability in openjpeg2

A flaw was discovered in OpenJPEG’s encoder, specifically in the opjdwtcalcexplicitstepsizes function. This flaw allows an attacker who can provide crafted inputs for the decomposition levels to cause a buffer overflow. The greatest threat of this vulnerability is to system availability...

Astra Linux – Vulnerability in openjpeg2

A flaw was discovered in OpenJPEG’s encoder. This flaw allows an attacker to provide specially crafted x,y offset inputs to OpenJPEG during encoding. The greatest threat of this vulnerability is to confidentiality, integrity, and system availability...

Astra Linux – Vulnerability in openjpeg2

There is a flaw in OpenJPEG’s T2 encoder in versions prior to 2.4.0. An attacker who can provide crafted input for OpenJPEG to process may cause a null pointer dereferencing. The most significant impact of this flaw is the availability of the application...

Astra Linux – Vulnerability in openjpeg2

A flaw was discovered in OpenJPEG in versions prior to 2.4.0. This flaw allows an attacker to provide specially crafted input to the conversion or encoding functionality, resulting in an out-of-bounds read. The greatest threat from this vulnerability is system availability...

Astra Linux – Vulnerability in openjpeg2

A flaw was discovered in the OpenJPEG project. A heap buffer overflow condition may occur when certain options are specified while using the opjdecompress utility. This could lead to an application crashing or other undefined behaviors...

Astra Linux – Vulnerability in openjpeg2

A flaw was discovered in OpenJPEG. Pictures constructed maliciously can cause the program to enter a large loop and continuously print warning messages on the terminal...

Rocky Linux 9 [CIQ] Security Update: openjpeg2 / openjpeg2-debuginfo / openjpeg2-debugsource / etc Multiple Vulnerabilities (crlsa-2025_7309)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20257309 advisory. openjpeg: heap buffer overflow in bin/common/color.c CVE-2024-56826 openjpeg: heap buffer overflow in lib/openjp2/j2k.c CVE-2024-56827 Tenable has extracte...

Rocky Linux 8 [CIQ] Security Update: openjpeg2 / openjpeg2-debuginfo / openjpeg2-debugsource / etc Multiple Vulnerabilities (crlsa-2021_4251)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20214251 advisory. openjpeg: use-after-free and double-free via a mix of valid and invalid files in a directory operated on by the decompressor CVE-2020-15389 openjpeg:...

AlmaLinux 9.2 [TuxCare] Security Update: openjpeg2 / openjpeg2-devel / openjpeg2-devel-docs / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1779825752)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1779825752 advisory. - A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified whi...