The vulnerability of the opj_pi_initialise_encode() function in the openjp2/pi.c component of the OpenJPEG image encoding and decoding library allows a attacker to cause a service failure.

The vulnerability of the opjpiinitialiseencode function in the openjp2/pi.c component of the OpenJPEG image encoding and decoding library is related to errors in number processing. Exploiting this vulnerability could allow an attacker to cause a service failure...

MINI-CV28-GHF4-WGHC

Bulletin has no description...

JLSEC-2026-1267 A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function...

A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opjpiinitialiseencode in the library src/lib/openjp2/pi.c. The manipulation leads to integer overflow. The attack must be carried out locally. The exploit is publicly available and might be used. The...

PT-2026-80509

A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opj pi initialise encode in the library src/lib/openjp2/pi.c. The manipulation leads to integer overflow. The attack must be carried out locally. The exploit is publicly available and might be used. The...

EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2743)

According to the versions of the package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opjpiinitialiseencode in the library...

EulerOS 2.0 SP15 : openjpeg2 (EulerOS-SA-2026-2495)

According to the versions of the openjpeg2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opjpiinitialiseencode in the library...

CVE-2023-39329 vulnerabilities

Vulnerabilities for packages: openjpeg...

CVE-2023-39328 vulnerabilities

Vulnerabilities for packages: openjpeg...

GHSA-HC4F-JC7G-W997 vulnerabilities

Vulnerabilities for packages: openjpeg...

GHSA-8G92-F59V-J999 vulnerabilities

Vulnerabilities for packages: openjpeg...

GHSA-HC4F-JC7G-W997 vulnerabilities

Vulnerabilities for packages: openjpeg...

CVE-2023-39328 vulnerabilities

Vulnerabilities for packages: openjpeg...

CVE-2023-39329 vulnerabilities

Vulnerabilities for packages: openjpeg...

GHSA-8G92-F59V-J999 vulnerabilities

Vulnerabilities for packages: openjpeg...

Advisory ROSA-SA-2026-3305

CVE-ID: CVE-2016-10506 BDU-ID: None CVE-Crit: Medium CVE-DESCRIPTION: Vulnerabilities involving division by zero in functions opjpinextcprl, opjpinextpcrl, and opjpinextrpcl in the pi.c file of OpenJPEG allow a malicious attacker to cause a service failure abrupt termination of the application...

JLSEC-2026-547

A flaw was found in the opj2decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free on an uninitialized pointer, leading to a segmentation fault and...

JLSEC-2026-539

There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0. An attacker who is able to provide crafted input to be processed by openjpeg could cause a null pointer dereference. The highest impact of this flaw is to application availability...

JLSEC-2026-544

opjt1clbldecodeprocessor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851...

JLSEC-2026-552

OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG from 2.5.1 through 2.5.3, a call to opjjp2readheader may lead to OOB heap memory write when the data stream pstream is too short and pimage is not initialized...

JLSEC-2026-536

A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during encoding. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...