Search for vulnerabilities
Vulnerability details: VCID-vch4-ws1q-hqev
Vulnerability ID VCID-vch4-ws1q-hqev
Aliases CVE-2017-14152
Summary openjpeg: Heap-based buffer overflow in opj_write_bytes_LE in cio.c
Status Published
Exploitability 0.5
Weighted Severity 3.0
Risk 1.5
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-122 Heap-based Buffer Overflow
System Score Found at
cvssv3 3.3 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14152.json
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2017-14152
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2017-14152
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2017-14152
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2017-14152
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2017-14152
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2017-14152
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2017-14152
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2017-14152
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2017-14152
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2017-14152
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14152.json
https://api.first.org/data/v1/epss?cve=CVE-2017-14152
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1626
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1628
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5152
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9118
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14039
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14040
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14041
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14152
1487389 https://bugzilla.redhat.com/show_bug.cgi?id=1487389
874431 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=874431
No exploits are available.
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14152.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.76897
EPSS Score 0.01089
Published At June 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-01T13:04:56.274556+00:00 RedHat Importer Import https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14152.json 36.1.3