Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:alpm/archlinux/openjpeg2@2.5.0-1
purl pkg:alpm/archlinux/openjpeg2@2.5.0-1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (4)
Vulnerability Summary Aliases
VCID-1z5a-aa47-dyft openjpeg: out-of-bounds read in functions pi_next_lrcp, pi_next_rlcp, pi_next_rpcl, pi_next_pcrl, pi_next_rpcl, and pi_next_cprl in openmj2/pi.c leads to denial of service CVE-2018-20846
VCID-2mnk-qxt4-97ga openjpeg: Heap-based buffer overflow in function t2_encode_packet in src/lib/openmj2/t2.c CVE-2018-16376
VCID-m3yn-396v-mfa5 openjpeg: DoS via memory exhaustion in opj_decompress CVE-2019-6988
VCID-pzv2-p44c-8qg4 Multiple vulnerabilities have been discovered in OpenJPEG, the worst of which could result in arbitrary code execution. CVE-2021-29338

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T18:26:23.753511+00:00 Arch Linux Importer Fixing VCID-2mnk-qxt4-97ga https://security.archlinux.org/AVG-1390 38.0.0
2026-04-01T18:26:23.728537+00:00 Arch Linux Importer Fixing VCID-1z5a-aa47-dyft https://security.archlinux.org/AVG-1390 38.0.0
2026-04-01T18:26:23.706068+00:00 Arch Linux Importer Fixing VCID-m3yn-396v-mfa5 https://security.archlinux.org/AVG-1390 38.0.0
2026-04-01T18:26:23.683695+00:00 Arch Linux Importer Fixing VCID-pzv2-p44c-8qg4 https://security.archlinux.org/AVG-1390 38.0.0