CVE-2020-6851

OpenJPEG vulnerability CVE-2020-6851 affects OpenJPEG 2.3.1 and older, with a heap-based buffer overflow in opj_t1_clbl_decode_processor (openjp2/t1.c) due to missing validation of opj_j2k_update_image_dimensions. Affected versions before 2.4.0 are at risk of arbitrary code execution or crash; ex...

CVE-2019-12973

Context: CVE-2019-12973 affects OpenJPEG 2.3.1. Vulnerability: In opj_t1_encode_cblks (openjp2/t1.c), excessive iteration can be exploited by a crafted BMP file to cause a denial of service. This is consistent with related issues in OpenJPEG’s t1.c handling. Impact (as stated): Remote denial of s...

CVE-2020-8112

CVE-2020-8112 pertains to OpenJPEG’s OpenJPEG2/OpenJP2 codebase. A heap-based buffer overflow occurs in opj_t1_clbl_decode_processor (file openjp2/t1.c) when qmfbid==1, affecting OpenJPEG 2.3.1 and earlier builds up to 2020-01-28 (a separate issue from CVE-2020-6851). Public advisories and Debian...

CVE-2018-21010

OpenJPEG is affected by CVE-2018-21010: a heap buffer overflow in color_apply_icc_profile (bin/common/color.c) present in OpenJPEG releases before 2.3.1. The CVE is tied to OpenJPEG under multiple advisories and Nessus/OpenVAS feeds reference this issue among OpenJPEG 2.3.x and earlier branches. ...

CVE-2020-27844

OpenJPEG vulnerability CVE-2020-27844 affects OpenJPEG before 2.4.0. A crafted input during conversion/encoding can cause an out-of-bounds write in lib/openjp2/t2.c (opj_t2_encode_packet), impacting confidentiality, integrity, and availability. Remediation: upgrade to OpenJPEG 2.4.0 or newer. Exp...

CVE-2020-15389

OpenJPEG up to 2.3.1 is affected by CVE-2020-15389: a use-after-free (and possible double-free) in jp2/opj_decompress.c when a directory contains a mix of valid and invalid files processed by the decompressor. The issue can crash the application or enable memory corruption; it is fixed in OpenJPE...

CVE-2020-27823

OpenJPEG2 contains CVE-2020-27823 affecting the OpenJPEG encoder. Connected advisories confirm multiple related issues (e.g., heap-buffer-overflow and out-of-bounds reads/writes) across OpenJPEG versions up to 2.4.0, with Affected packages including openjpeg2 and OpenJPEG 2.x components. The root...

CVE-2018-6616

OpenJPEG is affected by CVE-2018-6616 (and related) due to excessive iteration in opj_t1_encode_cblks (openjp2/t1.c), enabling DoS via crafted BMP files. Public details reference OpenJPEG 2.3.0/2.3.1 and similar advisories indicating this weakness in the t1.c path. Upstream fixes are reported in ...

CVE-2020-27824

OpenJPEG2 CVE-2020-27824 affects the encoder code path opj_dwt_calc_explicit_stepsizes(), where crafted input to decomposition levels can trigger a buffer overflow. The highest stated impact is to availability. Public advisories show remediations via updated openjpeg2 packages (e.g., Debian openj...

CVE-2021-29338

CVE-2021-29338 is an OpenJPEG 2.4.0 vulnerability: an integer overflow in the OpenJPEG library (openjp2/pi.c / related code paths) can be triggered by a directory with a very large number of files (example: 1,048,576) passed via the -ImgDir option, leading to a denial of service (crash). The issu...

CVE-2020-27814

CVE-2020-27814 is a heap-buffer overflow in OpenJPEG’s openjpeg2 handling of certain PNG inputs. The issue can cause application crashes or, in some cases, arbitrary code execution with user privileges. Affected packages across distributions include openjpeg2 and related libs, with mitigations/pa...

CVE-2021-3575

OpenJPEG OpenJPEG2 vulnerability CVE-2021-3575 is a heap-based buffer overflow in color.c:379:42 (sycc420_to_rgb) when decompressing a crafted J2K image, enabling arbitrary code execution with the attacker’s permissions. Multiple connected advisories confirm the flaw in the OpenJPEG library and l...

CVE-2020-27842

CVE-2020-27842 affects the OpenJPEG2 library, specifically the t2 encoder. A crafted input to OpenJPEG prior to version 2.4.0 can trigger a null pointer dereference, with the highest impact being a denial of service through reduced availability. Connected advisories confirm OpenJPEG vulnerabiliti...

CVE-2018-5785

OpenJPEG 2.3.0 is affected by CVE-2018-5785 due to an integer overflow caused by an out-of-bounds left shift in opj_j2k_setup_encoder (openjp2/j2k.c). This vulnerability can allow a remote attacker to cause a denial of service via a crafted BMP file. Multiple vendor advisories (Debian DSA-4405, A...

CVE-2018-5727

CVE-2018-5727 refers to an integer overflow in OpenJPEG 2.3.0’s opj_t1_encode_cblks function (openjp2/t1.c). The vulnerability allows remote attackers to cause a denial of service via a crafted BMP image. The provided documents consistently describe this issue as part of OpenJPEG’s 2.3.0 branch w...

CVE-2020-27843

CVE-2020-27843 affects OpenJPEG versions before 2.4.0. A specially crafted input to the conversion or encoding path can trigger an out-of-bounds read, with the highest impact on system availability. The connected advisories consistently cite OpenJPEG2 as the vulnerable component and indicate reme...

CVE-2016-8332

CVE-2016-8332 describes a buffer/heap overflow in OpenJPEG 2.1.1’s JPEG2000 parser. A crafted JPEG2000 image can trigger an out-of-bounds heap write, causing heap corruption and arbitrary code execution when a user opens a malicious file. PDF workflows using embedded JPEG2000 content and OpenJPEG...

CVE-2015-1239

CVE-2015-1239 is a vulnerability in OpenJPEG (used by PDFium in Google Chrome) where a double free in j2k_read_ppm_v3 can cause a remote-denial of service (process crash) via a crafted PDF. Affected software is OpenJPEG prior to r2997; impact is crash/DoS with no confidentiality or integrity loss...

CVE-2018-20847

CVE-2018-20847 is an overflow vulnerability in OpenJPEG fixed by upgrading to OpenJPEG 2.4.0+. The issue arises from an improper computation of p_tx0, p_tx1, p_ty0 and p_ty1 in opj_get_encoding_parameters within openjp2/pi.c up to OpenJPEG 2.3.0, enabling an integer overflow. Public advisories fr...

CVE-2020-27845

CVE-2020-27845 : In OpenJPEG, the flaw in src/lib/openjp2/pi.c (pre-2.4.0) allows an attacker-provided, untrusted input to trigger an out-of-bounds read during conversion/encoding, with impact to availability. Affected: OpenJPEG versions before 2.4.0. Remediation: upgrade to 2.4.0 or newer (per m...

CVE-2022-1122

CVE-2022-1122 affects openjpeg2 2.4.0, specifically opj2_decompress when processing a directory with many files. The issue is a failed buffer allocation for directory filenames leading to free() on an uninitialized pointer, causing a segmentation fault and denial of service. Connected advisories ...

CVE-2020-27841

CVE-2020-27841 affects the OpenJPEG2 library (openjpeg2) prior to version 2.4.0. The flaw occurs when an attacker provides crafted input to be processed by the OpenJPEG encoder, potentially causing an out-of-bounds read and impacting availability. The issue is evidenced in multiple connected advi...

CVE-2018-20845

CVE-2018-20845 is a division-by-zero vulnerability in OpenJPEG’s OpenMJ2/pi.c (openmj2/pi.c) affecting OpenJPEG up to version 2.3.0. Exploitation can crash the target process, causing a denial of service when processing crafted J2K images. The connected advisories/feeds explicitly cite CVE-2018-2...

CVE-2018-14423

CVE-2018-14423 affects the OpenJPEG project, specifically the function pi_next_pcrl/pi_next_cprl/pi_next_rpcl in lib/openjp3d/pi.c. The vulnerability is a division-by-zero in OpenJPEG up to version 2.3.0, which can allow remote attackers to cause an application crash (DoS) via crafted input. Conn...

CVE-2017-14041

OpenJPEG 2.2.0 contains a stack-based buffer overflow in pgxtoimage (bin/jp2/convert.c). This out-of-bounds write vulnerability (CVE-2017-14041) may lead to remote denial of service and possibly remote code execution. Descriptions across multiple connected sources confirm the affected function an...

CVE-2018-18088

CVE-2018-18088 affects OpenJPEG 2.3.0 with a NULL pointer dereference in imagetopnm (jp2/convert.c). Impact: potential denial of service or crash. Public advisories from multiple vendors (Ubuntu USN-4109-1, Debian DSA-4405, SUSE SUSE-SU-2025-03352/03353, EulerOS) confirm the fix in later/OpenJPEG...

CVE-2016-9112

CVE-2016-9112 is tied to OpenJPEG 2.1.2, with a Floating Point Exception in opj_pi_next_cprl (pi.c:523). The connected records confirm this flaw across multiple deployments and advisories (Ubuntu USN-5664-1, Debian DLA-1851-1, Red Hat unpatched listings), indicating exposure in various OpenJPEG-u...

CVE-2017-17480

OpenJPEG 2.3.0 contains a stack-based buffer overflow in the pgxtovolume function (jp3d/convert.c). The out-of-bounds write can enable remote denial of service or possibly remote code execution. Publicly documented remediation in connected advisories includes updates/patches: Debian DSA-4405-1 fi...

CVE-2016-9573

CVE-2016-9573 is an out-of-bounds read in OpenJPEG 2.1.2 (j2k_to_image tool). A crafted JPEG2000 file could crash the app or potentially disclose heap data. No exploitation details are provided in the documents. Remediation guidance across connected sources indicates upgrading OpenJPEG (e.g., to ...

CVE-2017-14039

OpenJPEG 2.2.0 is affected by CVE-2017-14039 in the opj_t2_encode_packet function (lib/openjp2/t2.c): a heap-based buffer overflow causes an out-of-bounds write, potentially enabling remote denial of service or other impact. Multiple vendor advisories (e.g., Debian DSA-4013, Mageia MGASA-2017-048...

CVE-2017-14152

OpenJPEG 2.2.0 contains CVE-2017-14152: a mishandled zero case in opj_j2k_set_cinema_parameters (lib/openjp2/j2k.c) can cause an out-of-bounds write, potentially leading to remote denial of service or remote code execution. Affected functions include opj_write_bytes_LE (lib/openjp2/cio.c) and opj...

CVE-2017-14040

OpenJPEG 2.2.0 has an invalid memory write in bin/jp2/convert.c (tgatoimage), causing a crash in tgatoimage and potentially remote denial of service or other impact. This CVE is CVE-2017-14040. Connected advisories/documents consistently describe the affected component and crash/DoS potential; no...

CVE-2017-17479

CVE-2017-17479 in OpenJPEG : The connected documents consistently describe a stack-based buffer overflow in the pgxtoimage function of OpenJPEG 2.3.0 (jpwl/convert.c) leading to an out-of-bounds write with potential remote denial of service or remote code execution. The vulnerability is associate...

CVE-2017-14151

CVE-2017-14151 affects OpenJPEG 2.2.0; an off-by-one error in opj_tcd_code_block_enc_allocate_data in lib/openjp2/tcd.c can cause an out-of-bounds write, leading to remote denial of service (heap-based overflow) and possibly remote code execution via affected paths (opj_mqc_flush, opj_t1_encode_c...

CVE-2017-12982

Summary: CVE-2017-12982 affects OpenJPEG 2.2.0. The bmp_read_info_header function in bin/jp2/convertbmp.c fails to reject headers with a zero biBitCount, which can trigger a denial of service via memory allocation failure in opj_image_create, related to opj_aligned_alloc_n in opj_malloc.c. The vu...

CVE-2013-6045

OpenJPEG (versions 1.3 and earlier) contains heap-based buffer overflows that affect the JPEG2000 decoding path, leading to remote code execution or crashes. CVE-2013-6045 is the original issue; CVE-2014-0158 documents a related flaw in j2k_decode/j2k_read_eoc/tcd_decode_tile interaction. Remedia...

CVE-2016-9581

OpenJPEG 2.1.2 contains an infinite loop in tiftoimage that leads to a heap buffer overflow in convert_32s_C1P1. OpenJPEG-related advisories (e.g., GLSA 2017-10) recommend upgrading to the latest OpenJPEG (≥2.3.0). Several openSUSE/OpenJPEG advisories list CVE-2016-9581 among heap overflow/loop i...

CVE-2025-54874

OpenJPEG (JPEG 2000 codec) contains a vulnerability CVE-2025-54874: in OpenJPEG 2.5.1–2.5.3, a call to opj_jp2_read_header may cause an out-of-bounds heap write when the data stream is too short and p_image is not initialized. This is referenced across multiple security advisories and vendors (Ub...

CVE-2018-16375

CVE-2018-16375 affects OpenJPEG 2.3.0. The vulnerability is in bin/jpwl/convert.c (pnmtoimage) where missing checks for header_info.height and header_info.width can cause a heap-based buffer overflow. This is documented across multiple sources (OpenJPEG/OpenJPEG-related advisories) but no patch v...

CVE-2016-7163

OpenJPEG vulnerability CVE-2016-7163 is caused by an integer overflow in opj_pi_create_decode (pi.c), enabling crafted JP2 files to trigger out-of-bounds read/write and potentially execute arbitrary code. Affected: OpenJPEG library across multiple platforms; root cause and impact summarized in li...

CVE-2016-3182

CVE-2016-3182 : OpenJPEG before 2.1.1 contains a flaw in color_esycc_to_rgb (bin/common/color.c) that can cause memory corruption/denial of service when processing crafted JPEG 2000 files. Multiple connected sources corroborate the issue and link it to OpenJPEG’s j2k/tile decoding paths (e.g., co...

CVE-2013-6052

OpenJPEG 1.3 and earlier are affected by CVE-2013-6052, a heap-based out-of-bounds read enabling remote information disclosure. The issue is fixed in OpenJPEG 1.5.2 (and related updates in advisories), with multiple references noting the vulnerability and providing upgrade paths (e.g., GLSA-20141...

CVE-2023-39327

OpenJPEG (openjpeg2) contains CVE-2023-39327: processing maliciously crafted images can trigger an infinite/very large loop and flood the terminal with warnings. Connected advisories confirm the issue across multiple distributions (SUSE openjpeg2 updates SUSE-SU-2026:0330-1, SUSE-SU-2026:0320-1; ...

CVE-2017-14164

OpenJPEG 2.2.0 contains a size-validation flaw in opj_j2k_write_sot (lib/openjp2/j2k.c) that can cause an out-of-bounds write, leading to remote denial of service or possibly remote code execution. This CVE-2017-14164 is one of several vulnerabilities reported in OpenJPEG; upstream advisories not...

CVE-2019-6988

CVE-2019-6988 affects OpenJPEG 2.3.0. The issue allows a remote attacker to trigger a denial of service via an attempted memory allocation failure in opj_calloc, called from opj_tcd_init_tile within openjp2/tcd.c during 64-bit opj_decompress. The underlying vulnerable code path is in openjp2/opj_...

CVE-2016-9675

OpenJPEG vulnerability CVE-2016-9675 is a heap-based buffer overflow found in the patch for CVE-2013-6045. A crafted JPEG2000 (j2k) image could crash the application or potentially allow arbitrary code execution. The issue affects OpenJPEG releases around that era (notably 1.3 and 1.5.1 in some a...

CVE-2023-39328

CVE-2023-39328 concerns the OpenJPEG project (OpenJPEG/Openjpeg2) and is evidenced in multiple connected advisories/plugins. The vulnerability is described as a flaw in OpenJPEG that can be triggered by a maliciously crafted file to bypass protections and cause an application crash. Concrete tech...

CVE-2012-3358

OpenJPEG 1.5 contains a heap-based buffer overflow in j2k_read_sot (j2k.c) that can be triggered by crafted JPEG 2000 images, allowing remote denial of service or arbitrary code execution. Public references across Nessus/Fedora/Mandriva advisories confirm CVE-2012-3358 and describe the vulnerabil...

CVE-2016-10504

OpenJPEG before 2.2.0 is affected by a heap-based buffer overflow in opj_mqc_byteout (mqc.c), enabling DoS via a crafted BMP file. Affected component: OpenJPEG JPEG 2000 library. Impact: application crash; denial of service. Remediation: upgrade to version 2.2.0 or later (OpenJPEG 2.2.x+/beyond)....

CVE-2009-5030

CVE-2009-5030 affects OpenJPEG 1.3 through 1.5. The tcd_free_encode function in tcd.c can be triggered by crafted tile information in Gray16 TIFF images, causing insufficient memory allocation and leading to an invalid free, which may result in memory corruption, a denial of service, and possibly...