Search for packages
| purl | pkg:deb/debian/openjpeg2@2.4.0-3 |
| Next non-vulnerable version | 2.5.0-2+deb12u2 |
| Latest non-vulnerable version | 2.5.0-2+deb12u2 |
| Risk | 3.4 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-an46-hxt9-57e1
Aliases: CVE-2021-3575 |
Out-of-bounds Write A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k file. An attacker could use this to execute arbitrary code with the permissions of the application compiled against openjpeg. |
Affected by 0 other vulnerabilities. |
|
VCID-cgvq-jt8a-4yba
Aliases: CVE-2024-56826 |
openjpeg: heap buffer overflow in bin/common/color.c |
Affected by 0 other vulnerabilities. |
|
VCID-k9dc-cxnp-nug2
Aliases: CVE-2024-56827 |
openjpeg: heap buffer overflow in lib/openjp2/j2k.c |
Affected by 0 other vulnerabilities. |
|
VCID-pzv2-p44c-8qg4
Aliases: CVE-2021-29338 |
Multiple vulnerabilities have been discovered in OpenJPEG, the worst of which could result in arbitrary code execution. |
Affected by 0 other vulnerabilities. |
|
VCID-qyq1-1npp-yyb4
Aliases: CVE-2025-50952 |
openjpeg: Openjpeg NULL pointer dereference |
Affected by 0 other vulnerabilities. |
|
VCID-xh3j-ufru-6fby
Aliases: CVE-2022-1122 |
Access of Uninitialized Pointer A flaw was found in the opj2_decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free() on an uninitialized pointer, leading to a segmentation fault and a denial of service. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-1z5a-aa47-dyft | openjpeg: out-of-bounds read in functions pi_next_lrcp, pi_next_rlcp, pi_next_rpcl, pi_next_pcrl, pi_next_rpcl, and pi_next_cprl in openmj2/pi.c leads to denial of service |
CVE-2018-20846
|
| VCID-2272-j2kp-x3du | Multiple vulnerabilities have been found in OpenJPEG, the worst of which could result in the arbitrary execution of code. |
CVE-2019-12973
|
| VCID-2ad2-5t5w-d7ew | openjpeg: global-buffer-overflow read in opj_dwt_calc_explicit_stepsizes() |
CVE-2020-27824
|
| VCID-3r1m-53dp-yff2 | Multiple vulnerabilities have been found in OpenJPEG, the worst of which could result in the arbitrary execution of code. |
CVE-2020-27842
|
| VCID-4hbk-qsje-63fd | Multiple vulnerabilities have been found in OpenJPEG, the worst of which could result in the arbitrary execution of code. |
CVE-2020-27841
|
| VCID-7ath-fa35-5uca | openjpeg: Heap-based buffer overflow in opj_t1_clbl_decode_processor() |
CVE-2020-6851
|
| VCID-ecez-3pwt-pudf | openjpeg: division-by-zero in functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c |
CVE-2018-20845
|
| VCID-hxax-t3zc-8kax | openjpeg: integer overflow in opj_t1_encode_cblks in src/lib/openjp2/t1.c |
CVE-2018-5727
|
| VCID-kq91-13ek-rkcu | Multiple vulnerabilities have been found in OpenJPEG, the worst of which could result in the arbitrary execution of code. |
CVE-2020-15389
|
| VCID-mdhg-k4sr-3bg7 | openjpeg: heap-based buffer overflow in pj_t1_clbl_decode_processor in openjp2/t1.c |
CVE-2020-8112
|
| VCID-u497-trj1-rfdj | Multiple vulnerabilities have been found in OpenJPEG, the worst of which could result in the arbitrary execution of code. |
CVE-2020-27814
|
| VCID-whsh-5urk-b3ap | openjpeg: heap-buffer-overflow write in opj_tcd_dc_level_shift_encode() |
CVE-2020-27823
|
| VCID-xc4v-2aa6-yfd6 | Multiple vulnerabilities have been found in OpenJPEG, the worst of which could result in the arbitrary execution of code. |
CVE-2020-27843
|
| VCID-xvjg-5z4m-pqdv | openjpeg: integer overflow in function opj_get_encoding_parameters in openjp2/pi.c |
CVE-2018-20847
|
| VCID-yb58-a8p7-v7dw | Multiple vulnerabilities have been found in OpenJPEG, the worst of which could result in the arbitrary execution of code. |
CVE-2018-21010
|
| VCID-z1a1-p95p-sya2 | An issue was discovered in mj2/opj_mj2_extract.c in OpenJPEG 2.3.0. The output prefix was not checked for length, which could overflow a buffer, when providing a prefix with 50 or more characters on the command line. |
CVE-2018-7648
|
| VCID-zgaa-57ak-jbex | Multiple vulnerabilities have been found in OpenJPEG, the worst of which could result in the arbitrary execution of code. |
CVE-2020-27845
|
| VCID-zz9f-brcy-ekdy | openjpeg: Heap-based buffer overflow in pnmtoimage function in bin/jpwl/convert.c |
CVE-2018-16375
|