pkg:Debian/openjpeg2

所有已知漏洞

• CRITICAL9.8CVE-2025-54874OpenJPEG is an open-source JPEG 2000 codec.
  from 0, < 2.5.3-2.1~deb13u1
• CRITICAL9.8CVE-2018-7648An issue was discovered in mj2/opj_mj2_extract.c in OpenJPEG 2.3.0.
  from 0, < 2.3.1-1
• CRITICAL9.8CVE-2017-17480openjpeg2 - security update
  from 0, < 2.1.2-1.1+deb9u3
• CRITICAL9.8CVE-2017-17480openjpeg2 - security update
  from 0, < 2.1.0-2+deb8u5
• CRITICAL9.8CVE-2017-17480openjpeg2 - security update
  from 0, < 2.3.0-2
• CRITICAL9.8CVE-2017-17479In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtoimage function in jpwl/convert.c.
  from 0, < 2.3.0-2
• CRITICAL9.8CVE-2015-8871Use-after-free vulnerability in the opj_j2k_write_mco function in j2k.c in OpenJPEG before 2.1.1 allows remote attackers to have unspecifie…
  from 0, < 2.1.1-1
• HIGH8.8CVE-2020-8112openjpeg2 - security update
  from 0, < 2.1.0-2+deb8u10
• HIGH8.8CVE-2020-8112openjpeg2 - security update
  from 0, < 2.4.0-1
• HIGH8.8CVE-2018-21010openjpeg2 - security update
  from 0, < 2.3.1-1
• HIGH8.8CVE-2018-21010openjpeg2 - security update
  from 0, < 2.1.0-2+deb8u8
• HIGH8.8CVE-2018-20847An improper computation of p_tx0, p_tx1, p_ty0 and p_ty1 in the function opj_get_encoding_parameters in openjp2/pi.c in OpenJPEG through 2.…
  from 0, < 2.3.1-1
• HIGH8.8CVE-2018-16376An issue was discovered in OpenJPEG 2.3.0.
  from 0
• HIGH8.8CVE-2018-16375An issue was discovered in OpenJPEG 2.3.0.
  from 0, < 2.3.1-1
• HIGH8.8CVE-2016-9580An integer overflow vulnerability was found in tiftoimage function in openjpeg 2.1.2, resulting in heap buffer overflow.
  from 0
• HIGH8.8CVE-2016-9581An infinite loop vulnerability in tiftoimage that results in heap buffer overflow in convert_32s_C1P1 was found in openjpeg 2.1.2.
  from 0
• HIGH8.8CVE-2017-14152A mishandled zero case was discovered in opj_j2k_set_cinema_parameters in lib/openjp2/j2k.c in OpenJPEG 2.2.0.
  from 0, < 2.3.0-1
• HIGH8.8CVE-2017-14151An off-by-one error was discovered in opj_tcd_code_block_enc_allocate_data in lib/openjp2/tcd.c in OpenJPEG 2.2.0.
  from 0, < 2.3.0-1
• HIGH8.8CVE-2017-14041A stack-based buffer overflow was discovered in the pgxtoimage function in bin/jp2/convert.c in OpenJPEG 2.2.0.
  from 0, < 2.3.0-1
• HIGH8.8CVE-2017-14040An invalid write access was discovered in bin/jp2/convert.c in OpenJPEG 2.2.0, triggering a crash in the tgatoimage function.
  from 0, < 2.3.0-1
• HIGH8.8CVE-2017-14039A heap-based buffer overflow was discovered in the opj_t2_encode_packet function in lib/openjp2/t2.c in OpenJPEG 2.2.0.
  from 0, < 2.3.0-1
• HIGH8.8CVE-2016-5159Multiple integer overflows in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92…
  from 0, < 2.1.2-1
• HIGH8.8CVE-2016-5158openjpeg2 - security update
  from 0, < 2.1.2-1
• HIGH8.8CVE-2016-5158openjpeg2 - security update
  from 0, < 2.1.0-2+deb8u2
• HIGH8.8CVE-2016-5157Heap-based buffer overflow in the opj_dwt_interleave_v function in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.8…
  from 0, < 2.1.2-1
• HIGH8.8CVE-2016-5152Integer overflow in the opj_tcd_get_decoded_tile_size function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89…
  from 0, < 2.1.2-1.2
• HIGH8.1CVE-2016-9573An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2k_to_image tool.
  from 0, < 2.1.2-1.1
• HIGH7.8CVE-2021-3575openjpeg2 - security update
  from 0, < 2.5.0-2+deb12u1
• HIGH7.8CVE-2021-3575openjpeg2 - security update
  from 0, < 2.4.0-3+deb11u1
• HIGH7.8CVE-2020-27823A flaw was found in OpenJPEG’s encoder.
  from 0, < 2.4.0-1
• HIGH7.8CVE-2020-27814openjpeg2 - security update
  from 0, < 2.4.0-1
• HIGH7.8CVE-2020-27814openjpeg2 - security update
  from 0, < 2.1.2-1.1+deb9u6
• HIGH7.8CVE-2016-8332A buffer overflow in OpenJPEG 2.1.1 causes arbitrary code execution when parsing a crafted image.
  from 0, < 2.1.2-1
• HIGH7.8CVE-2016-7163Integer overflow in the opj_pi_create_decode function in pi.c in OpenJPEG allows remote attackers to execute arbitrary code via a crafted J…
  from 0, < 2.1.2-1
• HIGH7.6CVE-2016-5139chromium-browser - security update
  from 0, < 2.1.2-1
• HIGH7.5CVE-2020-6851openjpeg2 - security update
  from 0, < 2.1.0-2+deb8u9
• HIGH7.5CVE-2020-6851openjpeg2 - security update
  from 0, < 2.4.0-1
• HIGH7.5CVE-2018-14423openjpeg2 - security update
  from 0, < 2.3.0-2
• HIGH7.5CVE-2018-14423openjpeg2 - security update
  from 0, < 2.1.0-2+deb8u6
• HIGH7.5CVE-2016-9114There is a NULL Pointer Access in function imagetopnm of convert.c:1943(jp2) of OpenJPEG 2.1.2.
  from 0
• HIGH7.5CVE-2016-9113There is a NULL pointer dereference in function imagetobmp of convertbmp.c:980 of OpenJPEG 2.1.2.
  from 0
• HIGH7.5CVE-2016-9112openjpeg2 - security update
  from 0, < 2.1.0-2+deb8u7
• HIGH7.5CVE-2016-9112openjpeg2 - security update
  from 0, < 2.1.2-1.2
• HIGH7.5CVE-2016-7445convert.c in OpenJPEG before 2.1.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) vi…
  from 0, < 2.1.2-1
• MEDIUM6.5CVE-2025-50952openjpeg2 - security update
  from 0, < 2.4.0-3+deb11u2
• MEDIUM6.5CVE-2025-50952openjpeg2 - security update
  from 0, < 2.4.0-3+deb11u2
• MEDIUM6.5CVE-2023-39329A flaw was found in OpenJPEG.
  from 0
• MEDIUM6.5CVE-2020-15389openjpeg2 - security update
  from 0, < 2.4.0-1
• MEDIUM6.5CVE-2020-15389openjpeg2 - security update
  from 0, < 2.3.0-2+deb10u2
• MEDIUM6.5CVE-2018-20846Out-of-bounds accesses in the functions pi_next_lrcp, pi_next_rlcp, pi_next_rpcl, pi_next_pcrl, pi_next_rpcl, and pi_next_cprl in openmj2/p…
  from 0, < 2.3.1-1
• MEDIUM6.5CVE-2018-20845Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c in OpenJPEG through 2.3.0 al…
  from 0, < 2.3.1-1
• MEDIUM6.5CVE-2019-6988An issue was discovered in OpenJPEG 2.3.0.
  from 0
• MEDIUM6.5CVE-2018-18088OpenJPEG 2.3.0 has a NULL pointer dereference for "red" in the imagetopnm function of jp2/convert.c
  from 0, < 2.3.0-2
• MEDIUM6.5CVE-2016-9572A NULL pointer dereference flaw was found in the way openjpeg 2.1.2 decoded certain input images.
  from 0, < 2.1.2-1.1
• MEDIUM6.5CVE-2018-5785In OpenJPEG 2.3.0, there is an integer overflow caused by an out-of-bounds left shift in the opj_j2k_setup_encoder function (openjp2/j2k.c).
  from 0, < 2.3.0-2
• MEDIUM6.5CVE-2018-5727In OpenJPEG 2.3.0, there is an integer overflow vulnerability in the opj_t1_encode_cblks function (openjp2/t1.c).
  from 0, < 2.3.1-1
• MEDIUM6.5CVE-2015-1239openjpeg2 - security update
  from 0, < 2.1.1-1
• MEDIUM6.5CVE-2015-1239openjpeg2 - security update
  from 0, < 2.1.0-2+deb8u4
• MEDIUM6.5CVE-2016-10507Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2.2.0 allows remote attackers to cause a den…
  from 0, < 2.1.2-1
• MEDIUM6.5CVE-2016-10506Division-by-zero vulnerabilities in the functions opj_pi_next_cprl, opj_pi_next_pcrl, and opj_pi_next_rpcl in pi.c in OpenJPEG before 2.2.0…
  from 0, < 2.2.0-1
• MEDIUM6.5CVE-2016-10505NULL pointer dereference vulnerabilities in the imagetopnm function in convert.c, sycc444_to_rgb function in color.c, color_esycc_to_rgb fu…
  from 0
• MEDIUM6.5CVE-2016-10504Heap-based buffer overflow vulnerability in the opj_mqc_byteout function in mqc.c in OpenJPEG before 2.2.0 allows remote attackers to cause…
  from 0, < 2.2.0-1
• MEDIUM6.5CVE-2016-9117NULL Pointer Access in function imagetopnm of convert.c(jp2):1289 in OpenJPEG 2.1.2.
  from 0
• MEDIUM6.5CVE-2016-9116NULL Pointer Access in function imagetopnm of convert.c:2226(jp2) in OpenJPEG 2.1.2.
  from 0
• MEDIUM6.5CVE-2016-9115Heap Buffer Over-read in function imagetotga of convert.c(jp2):942 in OpenJPEG 2.1.2.
  from 0
• MEDIUM6.5CVE-2016-1924The opj_tgt_reset function in OpenJpeg 2016.1.18 allows remote attackers to cause a denial of service (out-of-bounds read and application c…
  from 0, < 2.1.1-1
• MEDIUM6.5CVE-2016-1923Heap-based buffer overflow in the opj_j2k_update_image_data function in OpenJpeg 2016.1.18 allows remote attackers to cause a denial of ser…
  from 0, < 2.1.1-1
• MEDIUM6.3CVE-2016-1628pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, does not validate a certain precision value, which allows remote…
  from 0, < 2.1.2-1.2
• MEDIUM5.6CVE-2024-56827A flaw was found in the OpenJPEG project.
  from 0, < 2.4.0-3+deb11u1
• MEDIUM5.6CVE-2024-56826A flaw was found in the OpenJPEG project.
  from 0, < 2.4.0-3+deb11u1
• MEDIUM5.5CVE-2023-39328A vulnerability was found in OpenJPEG similar to CVE-2019-6988.
  from 0
• MEDIUM5.5CVE-2022-1122A flaw was found in the opj2_decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files.
  from 0, < 2.4.0-3+deb11u1
• MEDIUM5.5CVE-2020-27824A flaw was found in OpenJPEG’s encoder in the opj_dwt_calc_explicit_stepsizes() function.
  from 0, < 2.4.0-1
• MEDIUM5.5CVE-2021-29338openjpeg2 - security update
  from 0, < 2.4.0-3+deb11u1
• MEDIUM5.5CVE-2021-29338openjpeg2 - security update
  from 0, < 2.4.0-3+deb11u1
• MEDIUM5.5CVE-2020-27845There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0.
  from 0, < 2.4.0-1
• MEDIUM5.5CVE-2020-27843A flaw was found in OpenJPEG in versions prior to 2.4.0.
  from 0, < 2.4.0-1
• MEDIUM5.5CVE-2020-27842openjpeg2 - security update
  from 0, < 2.4.0-1
• MEDIUM5.5CVE-2020-27842openjpeg2 - security update
  from 0, < 2.1.2-1.1+deb9u7
• MEDIUM5.5CVE-2020-27841There's a flaw in openjpeg in versions prior to 2.4.0 in src/lib/openjp2/pi.c.
  from 0, < 2.4.0-1
• MEDIUM5.5CVE-2016-3182The color_esycc_to_rgb function in bin/common/color.c in OpenJPEG before 2.1.1 allows attackers to cause a denial of service (memory corrup…
  from 0, < 2.1.1-1
• MEDIUM5.5CVE-2019-12973openjpeg2 - security update
  from 0, < 2.1.2-1.1+deb9u5
• MEDIUM5.5CVE-2019-12973openjpeg2 - security update
  from 0, < 2.4.0-1
• MEDIUM5.5CVE-2018-6616In OpenJPEG 2.3.0, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c.
  from 0, < 2.3.0-2
• MEDIUM5.5CVE-2017-12982The bmp_read_info_header function in bin/jp2/convertbmp.c in OpenJPEG 2.2.0 does not reject headers with a zero biBitCount, which allows re…
  from 0, < 2.3.0-1
• MEDIUM5.5CVE-2016-4797Divide-by-zero vulnerability in the opj_tcd_init_tile function in tcd.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial…
  from 0, < 2.1.1-1
• MEDIUM5.5CVE-2016-4796Heap-based buffer overflow in the color_cmyk_to_rgb in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of…
  from 0, < 2.1.1-1
• MEDIUM5.5CVE-2016-3183The sycc422_t_rgb function in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (out-of-bounds r…
  from 0, < 2.1.1-1
• MEDIUM5.3CVE-2016-9118Heap Buffer Overflow (WRITE of size 4) in function pnmtoimage of convert.c:1719 in OpenJPEG 2.1.2.
  from 0, < 2.1.2-1.2
• MEDIUM4.3CVE-2023-39327A flaw was found in OpenJPEG.
  from 0
• MEDIUM4.3CVE-2016-1626openjpeg2 - security update
  from 0, < 2.1.0-2+deb8u3
• MEDIUM4.3CVE-2016-1626openjpeg2 - security update
  from 0, < 2.1.2-1.2
• —CVE-2026-6192A vulnerability was identified in uclouvain openjpeg up to 2.5.4.
  from 0, < 2.4.0-3+deb11u3
• —CVE-2015-6581openjpeg2 - security update
  from 0, < 2.1.0-2+deb8u1
• —CVE-2015-6581openjpeg2 - security update
  from 0, < 2.1.1-1
• —CVE-2014-7947OpenJPEG before r2944, as used in PDFium in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (out-of…
  from 0, < 2.1.1-1