Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:alpm/archlinux/openjpeg2@2.4.0-1
purl pkg:alpm/archlinux/openjpeg2@2.4.0-1
Next non-vulnerable version 2.5.0-1
Latest non-vulnerable version 2.5.0-1
Risk 3.1
Vulnerabilities affecting this package (4)
Vulnerability Summary Fixed by
VCID-1z5a-aa47-dyft
Aliases:
CVE-2018-20846
openjpeg: out-of-bounds read in functions pi_next_lrcp, pi_next_rlcp, pi_next_rpcl, pi_next_pcrl, pi_next_rpcl, and pi_next_cprl in openmj2/pi.c leads to denial of service
2.5.0-1
Affected by 0 other vulnerabilities.
VCID-2mnk-qxt4-97ga
Aliases:
CVE-2018-16376
openjpeg: Heap-based buffer overflow in function t2_encode_packet in src/lib/openmj2/t2.c
2.5.0-1
Affected by 0 other vulnerabilities.
VCID-m3yn-396v-mfa5
Aliases:
CVE-2019-6988
openjpeg: DoS via memory exhaustion in opj_decompress
2.5.0-1
Affected by 0 other vulnerabilities.
VCID-pzv2-p44c-8qg4
Aliases:
CVE-2021-29338
Multiple vulnerabilities have been discovered in OpenJPEG, the worst of which could result in arbitrary code execution.
2.5.0-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (11)
Vulnerability Summary Aliases
VCID-2272-j2kp-x3du Multiple vulnerabilities have been found in OpenJPEG, the worst of which could result in the arbitrary execution of code. CVE-2019-12973
VCID-2ad2-5t5w-d7ew openjpeg: global-buffer-overflow read in opj_dwt_calc_explicit_stepsizes() CVE-2020-27824
VCID-3r1m-53dp-yff2 Multiple vulnerabilities have been found in OpenJPEG, the worst of which could result in the arbitrary execution of code. CVE-2020-27842
VCID-4hbk-qsje-63fd Multiple vulnerabilities have been found in OpenJPEG, the worst of which could result in the arbitrary execution of code. CVE-2020-27841
VCID-7ath-fa35-5uca openjpeg: Heap-based buffer overflow in opj_t1_clbl_decode_processor() CVE-2020-6851
VCID-kq91-13ek-rkcu Multiple vulnerabilities have been found in OpenJPEG, the worst of which could result in the arbitrary execution of code. CVE-2020-15389
VCID-mdhg-k4sr-3bg7 openjpeg: heap-based buffer overflow in pj_t1_clbl_decode_processor in openjp2/t1.c CVE-2020-8112
VCID-u497-trj1-rfdj Multiple vulnerabilities have been found in OpenJPEG, the worst of which could result in the arbitrary execution of code. CVE-2020-27814
VCID-whsh-5urk-b3ap openjpeg: heap-buffer-overflow write in opj_tcd_dc_level_shift_encode() CVE-2020-27823
VCID-xc4v-2aa6-yfd6 Multiple vulnerabilities have been found in OpenJPEG, the worst of which could result in the arbitrary execution of code. CVE-2020-27843
VCID-zgaa-57ak-jbex Multiple vulnerabilities have been found in OpenJPEG, the worst of which could result in the arbitrary execution of code. CVE-2020-27845

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T18:26:45.377277+00:00 Arch Linux Importer Fixing VCID-whsh-5urk-b3ap https://security.archlinux.org/AVG-1980 38.0.0
2026-04-01T18:26:45.352682+00:00 Arch Linux Importer Fixing VCID-2272-j2kp-x3du https://security.archlinux.org/AVG-1339 38.0.0
2026-04-01T18:26:45.329685+00:00 Arch Linux Importer Fixing VCID-kq91-13ek-rkcu https://security.archlinux.org/AVG-1339 38.0.0
2026-04-01T18:26:45.303681+00:00 Arch Linux Importer Fixing VCID-u497-trj1-rfdj https://security.archlinux.org/AVG-1339 38.0.0
2026-04-01T18:26:45.277846+00:00 Arch Linux Importer Fixing VCID-2ad2-5t5w-d7ew https://security.archlinux.org/AVG-1339 38.0.0
2026-04-01T18:26:45.253969+00:00 Arch Linux Importer Fixing VCID-4hbk-qsje-63fd https://security.archlinux.org/AVG-1339 38.0.0
2026-04-01T18:26:45.231882+00:00 Arch Linux Importer Fixing VCID-3r1m-53dp-yff2 https://security.archlinux.org/AVG-1339 38.0.0
2026-04-01T18:26:45.209301+00:00 Arch Linux Importer Fixing VCID-xc4v-2aa6-yfd6 https://security.archlinux.org/AVG-1339 38.0.0
2026-04-01T18:26:45.186726+00:00 Arch Linux Importer Fixing VCID-zgaa-57ak-jbex https://security.archlinux.org/AVG-1339 38.0.0
2026-04-01T18:26:45.162157+00:00 Arch Linux Importer Fixing VCID-7ath-fa35-5uca https://security.archlinux.org/AVG-1339 38.0.0
2026-04-01T18:26:45.134961+00:00 Arch Linux Importer Fixing VCID-mdhg-k4sr-3bg7 https://security.archlinux.org/AVG-1339 38.0.0
2026-04-01T18:26:23.749796+00:00 Arch Linux Importer Affected by VCID-2mnk-qxt4-97ga https://security.archlinux.org/AVG-1390 38.0.0
2026-04-01T18:26:23.724797+00:00 Arch Linux Importer Affected by VCID-1z5a-aa47-dyft https://security.archlinux.org/AVG-1390 38.0.0
2026-04-01T18:26:23.702338+00:00 Arch Linux Importer Affected by VCID-m3yn-396v-mfa5 https://security.archlinux.org/AVG-1390 38.0.0
2026-04-01T18:26:23.679207+00:00 Arch Linux Importer Affected by VCID-pzv2-p44c-8qg4 https://security.archlinux.org/AVG-1390 38.0.0