Vulnerability index

Browse CVEs

46 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Openjpeg MEDIUM 6.5
CVE-2025-50952

openjpeg v 2.5.0 was discovered to contain a NULL pointer dereference via the component /openjp2/dwt.c.

Mitigation only
Fix from $1,600 2025-08-07
Openjpeg CRITICAL 9.8
CVE-2025-54874

OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG from 2.5.1 through 2.5.3, a call to opj_jp2_read_header may lead to OOB heap memory write whe…

Fix: after 2.5.3
Fix from $2,300 2025-08-05
Openjpeg MEDIUM 6.5
CVE-2023-39329

A flaw was found in OpenJPEG. A resource exhaustion can occur in the opj_t1_decode_cblks function in tcd.c through a crafted image file, causing a de…

Mitigation only
Fix from $1,600 2024-07-13
Openjpeg MEDIUM 5.5
CVE-2023-39328

A vulnerability was found in OpenJPEG similar to CVE-2019-6988. This flaw allows an attacker to bypass existing protections and cause an application …

Patch available
Fix from $1,600 2024-07-09
Openjpeg MEDIUM 5.5
CVE-2016-3182

The color_esycc_to_rgb function in bin/common/color.c in OpenJPEG before 2.1.1 allows attackers to cause a denial of service (memory corruption) via …

Fix: 2.1.1+
Fix from $1,600 2020-02-20
Openjpeg MEDIUM 6.5
CVE-2018-20846

Out-of-bounds accesses in the functions pi_next_lrcp, pi_next_rlcp, pi_next_rpcl, pi_next_pcrl, pi_next_rpcl, and pi_next_cprl in openmj2/pi.c in Ope…

Fix: after 2.3.0
Fix from $1,600 2019-06-26
Openjpeg MEDIUM 6.5
CVE-2018-20845

Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote…

Fix: after 2.3.0
Fix from $1,600 2019-06-26
Openjpeg MEDIUM 6.5
CVE-2019-6988

An issue was discovered in OpenJPEG 2.3.0. It allows remote attackers to cause a denial of service (attempted excessive memory allocation) in opj_cal…

No fix yet
Fix from $1,600 2019-01-28
Openjpeg HIGH 8.8
CVE-2018-16375

An issue was discovered in OpenJPEG 2.3.0. Missing checks for header_info.height and header_info.width in the function pnmtoimage in bin/jpwl/convert…

Patch available
Fix from $1,950 2018-09-03
Openjpeg HIGH 8.8
CVE-2018-16376

An issue was discovered in OpenJPEG 2.3.0. A heap-based buffer overflow was discovered in the function t2_encode_packet in lib/openmj2/t2.c. The vuln…

Mitigation only
Fix from $1,950 2018-09-03
Openjpeg HIGH 8.8
CVE-2016-9580

An integer overflow vulnerability was found in tiftoimage function in openjpeg 2.1.2, resulting in heap buffer overflow.

Patch available
Fix from $1,950 2018-08-01
Openjpeg HIGH 8.8
CVE-2016-9581

An infinite loop vulnerability in tiftoimage that results in heap buffer overflow in convert_32s_C1P1 was found in openjpeg 2.1.2.

Patch available
Fix from $1,950 2018-08-01
Openjpeg HIGH 8.8
CVE-2014-0158

Heap-based buffer overflow in the JPEG2000 image tile decoder in OpenJPEG before 1.5.2 allows remote attackers to cause a denial of service (applicat…

Fix: 1.5.2+
Fix from $1,950 2018-04-10
Openjpeg CRITICAL 9.8
CVE-2018-7648

An issue was discovered in mj2/opj_mj2_extract.c in OpenJPEG 2.3.0. The output prefix was not checked for length, which could overflow a buffer, when…

Patch available
Fix from $2,300 2018-03-02
Openjpeg MEDIUM 6.5
CVE-2018-5727

In OpenJPEG 2.3.0, there is an integer overflow vulnerability in the opj_t1_encode_cblks function (openjp2/t1.c). Remote attackers could leverage thi…

No fix yet
Fix from $1,600 2018-01-16
Openjpeg CRITICAL 9.8
CVE-2017-17479

In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtoimage function in jpwl/convert.c. The vulnerability causes an out-of-boun…

Mitigation only
Fix from $2,300 2017-12-08
Openjpeg HIGH 8.8
CVE-2017-14164EPSS 5%

A size-validation issue was discovered in opj_j2k_write_sot in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, …

Fix: 2.3.0+
Fix from $1,950 2017-09-06
Openjpeg MEDIUM 6.5
CVE-2016-10504EPSS 8%

Heap-based buffer overflow vulnerability in the opj_mqc_byteout function in mqc.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial …

Fix: after 2.1.2
Fix from $1,600 2017-08-30
Openjpeg MEDIUM 6.5
CVE-2016-10505

NULL pointer dereference vulnerabilities in the imagetopnm function in convert.c, sycc444_to_rgb function in color.c, color_esycc_to_rgb function in …

Fix: after 2.1.2
Fix from $1,600 2017-08-30
Openjpeg MEDIUM 6.5
CVE-2016-10506

Division-by-zero vulnerabilities in the functions opj_pi_next_cprl, opj_pi_next_pcrl, and opj_pi_next_rpcl in pi.c in OpenJPEG before 2.2.0 allow rem…

Fix: after 2.1.2
Fix from $1,600 2017-08-30
Openjpeg MEDIUM 6.5
CVE-2016-10507

Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of ser…

Fix: after 2.1.2
Fix from $1,600 2017-08-30
Openjpeg MEDIUM 5.5
CVE-2017-12982

The bmp_read_info_header function in bin/jp2/convertbmp.c in OpenJPEG 2.2.0 does not reject headers with a zero biBitCount, which allows remote attac…

Fix: 2.3.0+
Fix from $1,600 2017-08-21
Openjpeg MEDIUM 5.5
CVE-2016-3183

The sycc422_t_rgb function in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (out-of-bounds read) via a…

Fix: after 2.1.0
Fix from $1,600 2017-02-03
Openjpeg MEDIUM 5.3
CVE-2016-9118

Heap Buffer Overflow (WRITE of size 4) in function pnmtoimage of convert.c:1719 in OpenJPEG 2.1.2.

No fix yet
Fix from $1,600 2016-10-30
Openjpeg MEDIUM 6.5
CVE-2016-9117

NULL Pointer Access in function imagetopnm of convert.c(jp2):1289 in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k fil…

No fix yet
Fix from $1,600 2016-10-30
Openjpeg MEDIUM 6.5
CVE-2016-9116

NULL Pointer Access in function imagetopnm of convert.c:2226(jp2) in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k fil…

No fix yet
Fix from $1,600 2016-10-30
Openjpeg MEDIUM 6.5
CVE-2016-9115

Heap Buffer Over-read in function imagetotga of convert.c(jp2):942 in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k fi…

No fix yet
Fix from $1,600 2016-10-30
Openjpeg HIGH 7.5
CVE-2016-9114

There is a NULL Pointer Access in function imagetopnm of convert.c:1943(jp2) of OpenJPEG 2.1.2. image->comps[compno].data is not assigned a value aft…

No fix yet
Fix from $1,950 2016-10-30
Openjpeg HIGH 7.5
CVE-2016-9113

There is a NULL pointer dereference in function imagetobmp of convertbmp.c:980 of OpenJPEG 2.1.2. image->comps[0].data is not assigned a value after …

No fix yet
Fix from $1,950 2016-10-30
Openjpeg HIGH 7.5
CVE-2016-9112

Floating Point Exception (aka FPE or divide by zero) in opj_pi_next_cprl function in openjp2/pi.c:523 in OpenJPEG 2.1.2.

No fix yet
Fix from $1,950 2016-10-29