Browse CVEs

MEDIUM 6.5 CVE-2025-50952 openjpeg v 2.5.0 was discovered to contain a NULL pointer dereference via the component /openjp2/dwt.c. Openjpeg Mitigation only Fix from $1,6002025-08-07 CRITICAL 9.8 CVE-2025-54874 OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG from 2.5.1 through 2.5.3, a call to opj_jp2_read_header may lead to OOB heap memory write whe… Openjpeg after 2.5.3 Fix from $2,3002025-08-05 MEDIUM 6.5 CVE-2023-39329 A flaw was found in OpenJPEG. A resource exhaustion can occur in the opj_t1_decode_cblks function in tcd.c through a crafted image file, causing a de… Openjpeg Mitigation only Fix from $1,6002024-07-13 MEDIUM 5.5 CVE-2023-39328 A vulnerability was found in OpenJPEG similar to CVE-2019-6988. This flaw allows an attacker to bypass existing protections and cause an application … Openjpeg Patch available Fix from $1,6002024-07-09 MEDIUM 5.5 CVE-2016-3182 The color_esycc_to_rgb function in bin/common/color.c in OpenJPEG before 2.1.1 allows attackers to cause a denial of service (memory corruption) via … Openjpeg 2.1.1+ Fix from $1,6002020-02-20 MEDIUM 6.5 CVE-2018-20846 Out-of-bounds accesses in the functions pi_next_lrcp, pi_next_rlcp, pi_next_rpcl, pi_next_pcrl, pi_next_rpcl, and pi_next_cprl in openmj2/pi.c in Ope… Openjpeg after 2.3.0 Fix from $1,6002019-06-26 MEDIUM 6.5 CVE-2018-20845 Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote… Openjpeg after 2.3.0 Fix from $1,6002019-06-26 MEDIUM 6.5 CVE-2019-6988 An issue was discovered in OpenJPEG 2.3.0. It allows remote attackers to cause a denial of service (attempted excessive memory allocation) in opj_cal… Openjpeg No fix yet Fix from $1,6002019-01-28 HIGH 8.8 CVE-2018-16375 An issue was discovered in OpenJPEG 2.3.0. Missing checks for header_info.height and header_info.width in the function pnmtoimage in bin/jpwl/convert… Openjpeg Patch available Fix from $1,9502018-09-03 HIGH 8.8 CVE-2018-16376 An issue was discovered in OpenJPEG 2.3.0. A heap-based buffer overflow was discovered in the function t2_encode_packet in lib/openmj2/t2.c. The vuln… Openjpeg Mitigation only Fix from $1,9502018-09-03 HIGH 8.8 CVE-2016-9580 An integer overflow vulnerability was found in tiftoimage function in openjpeg 2.1.2, resulting in heap buffer overflow. Openjpeg Patch available Fix from $1,9502018-08-01 HIGH 8.8 CVE-2016-9581 An infinite loop vulnerability in tiftoimage that results in heap buffer overflow in convert_32s_C1P1 was found in openjpeg 2.1.2. Openjpeg Patch available Fix from $1,9502018-08-01 HIGH 8.8 CVE-2014-0158 Heap-based buffer overflow in the JPEG2000 image tile decoder in OpenJPEG before 1.5.2 allows remote attackers to cause a denial of service (applicat… Openjpeg 1.5.2+ Fix from $1,9502018-04-10 CRITICAL 9.8 CVE-2018-7648 An issue was discovered in mj2/opj_mj2_extract.c in OpenJPEG 2.3.0. The output prefix was not checked for length, which could overflow a buffer, when… Openjpeg Patch available Fix from $2,3002018-03-02 MEDIUM 6.5 CVE-2018-5727 In OpenJPEG 2.3.0, there is an integer overflow vulnerability in the opj_t1_encode_cblks function (openjp2/t1.c). Remote attackers could leverage thi… Openjpeg No fix yet Fix from $1,6002018-01-16 CRITICAL 9.8 CVE-2017-17479 In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtoimage function in jpwl/convert.c. The vulnerability causes an out-of-boun… Openjpeg Mitigation only Fix from $2,3002017-12-08 HIGH 8.8 CVE-2017-14164EPSS 5% A size-validation issue was discovered in opj_j2k_write_sot in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, … Openjpeg 2.3.0+ Fix from $1,9502017-09-06 MEDIUM 6.5 CVE-2016-10504EPSS 8% Heap-based buffer overflow vulnerability in the opj_mqc_byteout function in mqc.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial … Openjpeg after 2.1.2 Fix from $1,6002017-08-30 MEDIUM 6.5 CVE-2016-10505 NULL pointer dereference vulnerabilities in the imagetopnm function in convert.c, sycc444_to_rgb function in color.c, color_esycc_to_rgb function in … Openjpeg after 2.1.2 Fix from $1,6002017-08-30 MEDIUM 6.5 CVE-2016-10506 Division-by-zero vulnerabilities in the functions opj_pi_next_cprl, opj_pi_next_pcrl, and opj_pi_next_rpcl in pi.c in OpenJPEG before 2.2.0 allow rem… Openjpeg after 2.1.2 Fix from $1,6002017-08-30 MEDIUM 6.5 CVE-2016-10507 Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of ser… Openjpeg after 2.1.2 Fix from $1,6002017-08-30 MEDIUM 5.5 CVE-2017-12982 The bmp_read_info_header function in bin/jp2/convertbmp.c in OpenJPEG 2.2.0 does not reject headers with a zero biBitCount, which allows remote attac… Openjpeg 2.3.0+ Fix from $1,6002017-08-21 MEDIUM 5.5 CVE-2016-3183 The sycc422_t_rgb function in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (out-of-bounds read) via a… Openjpeg after 2.1.0 Fix from $1,6002017-02-03 MEDIUM 5.3 CVE-2016-9118 Heap Buffer Overflow (WRITE of size 4) in function pnmtoimage of convert.c:1719 in OpenJPEG 2.1.2. Openjpeg No fix yet Fix from $1,6002016-10-30 MEDIUM 6.5 CVE-2016-9117 NULL Pointer Access in function imagetopnm of convert.c(jp2):1289 in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k fil… Openjpeg No fix yet Fix from $1,6002016-10-30 MEDIUM 6.5 CVE-2016-9116 NULL Pointer Access in function imagetopnm of convert.c:2226(jp2) in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k fil… Openjpeg No fix yet Fix from $1,6002016-10-30 MEDIUM 6.5 CVE-2016-9115 Heap Buffer Over-read in function imagetotga of convert.c(jp2):942 in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k fi… Openjpeg No fix yet Fix from $1,6002016-10-30 HIGH 7.5 CVE-2016-9114 There is a NULL Pointer Access in function imagetopnm of convert.c:1943(jp2) of OpenJPEG 2.1.2. image->comps[compno].data is not assigned a value aft… Openjpeg No fix yet Fix from $1,9502016-10-30 HIGH 7.5 CVE-2016-9113 There is a NULL pointer dereference in function imagetobmp of convertbmp.c:980 of OpenJPEG 2.1.2. image->comps[0].data is not assigned a value after … Openjpeg No fix yet Fix from $1,9502016-10-30 HIGH 7.5 CVE-2016-9112 Floating Point Exception (aka FPE or divide by zero) in opj_pi_next_cprl function in openjp2/pi.c:523 in OpenJPEG 2.1.2. Openjpeg No fix yet Fix from $1,9502016-10-29