Uclouvain Openjpeg
83 CVEs affecting Uclouvain Openjpeg. Latest disclosed: 2026-04-13. Critical: 5, High: 25.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-54874 | Critical | 9.8 | 2025-08-05 | OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG from 2.5.1 through 2.5.3, a call to opj_jp2_read_header may lead to OOB heap memory write when the data… |
CVE-2018-7648 | Critical | 9.8 | 2018-03-02 | An issue was discovered in mj2/opj_mj2_extract.c in OpenJPEG 2.3.0. The output prefix was not checked for length, which could overflow a buffer, when providing… |
CVE-2017-17480 | Critical | 9.8 | 2017-12-08 | In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtovolume function in jp3d/convert.c. The vulnerability causes an out-of-bounds write… |
CVE-2017-17479 | Critical | 9.8 | 2017-12-08 | In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtoimage function in jpwl/convert.c. The vulnerability causes an out-of-bounds write… |
CVE-2015-8871 | Critical | 9.8 | 2016-09-21 | Use-after-free vulnerability in the opj_j2k_write_mco function in j2k.c in OpenJPEG before 2.1.1 allows remote attackers to have unspecified impact via unknown… |
CVE-2020-8112 | High | 8.8 | 2020-01-28 | opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue tha… |
CVE-2018-21010 | High | 8.8 | 2019-09-05 | OpenJPEG before 2.3.1 has a heap buffer overflow in color_apply_icc_profile in bin/common/color.c. |
CVE-2018-20847 | High | 8.8 | 2019-06-26 | An improper computation of p_tx0, p_tx1, p_ty0 and p_ty1 in the function opj_get_encoding_parameters in openjp2/pi.c in OpenJPEG through 2.3.0 can lead to an i… |
CVE-2018-16376 | High | 8.8 | 2018-09-03 | An issue was discovered in OpenJPEG 2.3.0. A heap-based buffer overflow was discovered in the function t2_encode_packet in lib/openmj2/t2.c. The vulnerability… |
CVE-2018-16375 | High | 8.8 | 2018-09-03 | An issue was discovered in OpenJPEG 2.3.0. Missing checks for header_info.height and header_info.width in the function pnmtoimage in bin/jpwl/convert.c can lea… |
CVE-2014-0158 | High | 8.8 | 2018-04-10 | Heap-based buffer overflow in the JPEG2000 image tile decoder in OpenJPEG before 1.5.2 allows remote attackers to cause a denial of service (application crash)… |
CVE-2017-14164 | High | 8.8 | 2017-09-06 | A size-validation issue was discovered in opj_j2k_write_sot in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may… |
CVE-2017-14152 | High | 8.8 | 2017-09-05 | A mishandled zero case was discovered in opj_j2k_set_cinema_parameters in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write… |
CVE-2017-14151 | High | 8.8 | 2017-09-05 | An off-by-one error was discovered in opj_tcd_code_block_enc_allocate_data in lib/openjp2/tcd.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds wr… |
CVE-2017-14041 | High | 8.8 | 2017-08-30 | A stack-based buffer overflow was discovered in the pgxtoimage function in bin/jp2/convert.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write… |
CVE-2017-14040 | High | 8.8 | 2017-08-30 | An invalid write access was discovered in bin/jp2/convert.c in OpenJPEG 2.2.0, triggering a crash in the tgatoimage function. The vulnerability may lead to rem… |
CVE-2017-14039 | High | 8.8 | 2017-08-30 | A heap-based buffer overflow was discovered in the opj_t2_encode_packet function in lib/openjp2/t2.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-boun… |
CVE-2021-3575 | High | 7.8 | 2022-03-04 | A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k file. An attacker could use this to ex… |
CVE-2020-27823 | High | 7.8 | 2021-05-13 | A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during encoding. The highest… |
CVE-2020-27814 | High | 7.8 | 2021-01-26 | A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. An attacker could use this flaw to cause an application crash or in som… |