Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/openjpeg2@2.5.0-2%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/openjpeg2@2.5.0-2%2Bdeb12u1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (3)
Vulnerability Summary Aliases
VCID-an46-hxt9-57e1 Out-of-bounds Write A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k file. An attacker could use this to execute arbitrary code with the permissions of the application compiled against openjpeg. CVE-2021-3575
VCID-cgvq-jt8a-4yba openjpeg: heap buffer overflow in bin/common/color.c CVE-2024-56826
VCID-k9dc-cxnp-nug2 openjpeg: heap buffer overflow in lib/openjp2/j2k.c CVE-2024-56827

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T12:21:30.752632+00:00 Debian Importer Fixing VCID-an46-hxt9-57e1 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T11:03:04.284348+00:00 Debian Importer Fixing VCID-cgvq-jt8a-4yba https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T08:39:14.889261+00:00 Debian Importer Fixing VCID-k9dc-cxnp-nug2 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T08:27:19.897528+00:00 Debian Importer Fixing VCID-an46-hxt9-57e1 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:30:13.113206+00:00 Debian Importer Fixing VCID-cgvq-jt8a-4yba https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T17:49:03.582858+00:00 Debian Importer Fixing VCID-k9dc-cxnp-nug2 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:48:43.058774+00:00 Debian Importer Fixing VCID-k9dc-cxnp-nug2 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:48:42.991570+00:00 Debian Importer Fixing VCID-cgvq-jt8a-4yba https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:48:42.825376+00:00 Debian Importer Fixing VCID-an46-hxt9-57e1 https://security-tracker.debian.org/tracker/data/json 38.1.0