CVE-2025-50952

all versions

openjpeg v 2.5.0 was discovered to contain a NULL pointer dereference via the component /openjp2/dwt.c.

6.5MEDIUM

CVE-2025-54874

<= 2.5.3

OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG from 2.5.1 through 2.5.3, a call to opj_jp2_read_header may lead to OOB he

9.8CRITICAL

CVE-2023-39329

all versions

A flaw was found in OpenJPEG. A resource exhaustion can occur in the opj_t1_decode_cblks function in tcd.c through a crafted image

6.5MEDIUM

CVE-2023-39327

all versions

A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print

4.3MEDIUM

CVE-2023-39328

all versions

A vulnerability was found in OpenJPEG similar to CVE-2019-6988. This flaw allows an attacker to bypass existing protections and ca

5.5MEDIUM

CVE-2022-1122

all versions

A flaw was found in the opj2_decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of

5.5MEDIUM

CVE-2021-3575

<= 2.4.0

A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k file. An

7.8HIGH

CVE-2020-27823

< 2.4.0

A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to u

7.8HIGH

CVE-2020-27824

< 2.4.0

A flaw was found in OpenJPEG’s encoder in the opj_dwt_calc_explicit_stepsizes() function. This flaw allows an attacker who can s

5.5MEDIUM

CVE-2021-29338

all versions

Integer Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service (DoS). This occu

5.5MEDIUM

CVE-2020-27814

<= 1.5.1

A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. An attacker could use this flaw to cause a

7.8HIGH

CVE-2020-27845

< 2.4.0

There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input t

5.5MEDIUM

CVE-2020-27844

< 2.4.0

A flaw was found in openjpeg's src/lib/openjp2/t2.c in versions prior to 2.4.0. This flaw allows an attacker to provide crafted in

7.8HIGH

CVE-2020-27843

< 2.4.0

A flaw was found in OpenJPEG in versions prior to 2.4.0. This flaw allows an attacker to provide specially crafted input to the co

5.5MEDIUM

CVE-2020-27842

< 2.4.0

There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0. An attacker who is able to provide crafted input to be process

5.5MEDIUM

CVE-2020-27841

< 2.4.0

There's a flaw in openjpeg in versions prior to 2.4.0 in src/lib/openjp2/pi.c. When an attacker is able to provide crafted input t

5.5MEDIUM

CVE-2020-15389

<= 2.3.1

jp2/opj_decompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid and invalid f

6.5MEDIUM

CVE-2016-3182

< 2.1.1

The color_esycc_to_rgb function in bin/common/color.c in OpenJPEG before 2.1.1 allows attackers to cause a denial of service (memo

5.5MEDIUM

CVE-2020-8112

all versions

opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==

8.8HIGH

CVE-2020-6851

<= 2.3.1

OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k

7.5HIGH

CVE-2018-21010

< 2.3.1

OpenJPEG before 2.3.1 has a heap buffer overflow in color_apply_icc_profile in bin/common/color.c.

8.8HIGH

CVE-2019-12973

all versions

In OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could levera

5.5MEDIUM

CVE-2018-20847

<= 2.3.0

An improper computation of p_tx0, p_tx1, p_ty0 and p_ty1 in the function opj_get_encoding_parameters in openjp2/pi.c in OpenJPEG t

8.8HIGH

CVE-2018-20846

<= 2.3.0

Out-of-bounds accesses in the functions pi_next_lrcp, pi_next_rlcp, pi_next_rpcl, pi_next_pcrl, pi_next_rpcl, and pi_next_cprl in

6.5MEDIUM

CVE-2018-20845

<= 2.3.0

Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c in OpenJPEG through

6.5MEDIUM

CVE-2019-6988

all versions

An issue was discovered in OpenJPEG 2.3.0. It allows remote attackers to cause a denial of service (attempted excessive memory all

6.5MEDIUM

CVE-2018-18088

all versions

OpenJPEG 2.3.0 has a NULL pointer dereference for "red" in the imagetopnm function of jp2/convert.c

6.5MEDIUM

CVE-2018-16376

all versions

An issue was discovered in OpenJPEG 2.3.0. A heap-based buffer overflow was discovered in the function t2_encode_packet in lib/ope

8.8HIGH

CVE-2018-16375

all versions

An issue was discovered in OpenJPEG 2.3.0. Missing checks for header_info.height and header_info.width in the function pnmtoimage

8.8HIGH

CVE-2016-9580

all versions

An integer overflow vulnerability was found in tiftoimage function in openjpeg 2.1.2, resulting in heap buffer overflow.

3.3LOW

CVE-2016-9572

all versions

A NULL pointer dereference flaw was found in the way openjpeg 2.1.2 decoded certain input images. Due to a logic error in the code

5.9MEDIUM

CVE-2016-9581

all versions

An infinite loop vulnerability in tiftoimage that results in heap buffer overflow in convert_32s_C1P1 was found in openjpeg 2.1.2.

3.3LOW

CVE-2016-9573

all versions

An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2k_to_image tool. Converting a specially crafted JPEG2000

6.5MEDIUM

CVE-2018-14423

<= 2.3.0

Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in lib/openjp3d/pi.c in OpenJPEG th

7.5HIGH

CVE-2014-0158

< 1.5.2

Heap-based buffer overflow in the JPEG2000 image tile decoder in OpenJPEG before 1.5.2 allows remote attackers to cause a denial o

8.8HIGH

CVE-2018-7648

all versions

An issue was discovered in mj2/opj_mj2_extract.c in OpenJPEG 2.3.0. The output prefix was not checked for length, which could over

9.8CRITICAL

CVE-2018-6616

all versions

In OpenJPEG 2.3.0, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could levera

5.5MEDIUM

CVE-2018-5785

all versions

In OpenJPEG 2.3.0, there is an integer overflow caused by an out-of-bounds left shift in the opj_j2k_setup_encoder function (openj

6.5MEDIUM

CVE-2018-5727

all versions

In OpenJPEG 2.3.0, there is an integer overflow vulnerability in the opj_t1_encode_cblks function (openjp2/t1.c). Remote attackers

6.5MEDIUM

CVE-2017-17480

all versions

In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtovolume function in jp3d/convert.c. The vulnerability c

9.8CRITICAL

CVE-2017-17479

all versions

In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtoimage function in jpwl/convert.c. The vulnerability ca

9.8CRITICAL

CVE-2015-1239

< 2.1.1

Double free vulnerability in the j2k_read_ppm_v3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows rem

6.5MEDIUM

CVE-2017-14164

< 2.3.0

A size-validation issue was discovered in opj_j2k_write_sot in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability causes an ou

8.8HIGH

CVE-2017-14152

all versions

A mishandled zero case was discovered in opj_j2k_set_cinema_parameters in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability c

8.8HIGH

CVE-2017-14151

all versions

An off-by-one error was discovered in opj_tcd_code_block_enc_allocate_data in lib/openjp2/tcd.c in OpenJPEG 2.2.0. The vulnerabili

8.8HIGH

CVE-2017-14041

all versions

A stack-based buffer overflow was discovered in the pgxtoimage function in bin/jp2/convert.c in OpenJPEG 2.2.0. The vulnerability

8.8HIGH

CVE-2017-14040

all versions

An invalid write access was discovered in bin/jp2/convert.c in OpenJPEG 2.2.0, triggering a crash in the tgatoimage function. The

8.8HIGH

CVE-2017-14039

< 2.3.0

A heap-based buffer overflow was discovered in the opj_t2_encode_packet function in lib/openjp2/t2.c in OpenJPEG 2.2.0. The vulner

8.8HIGH

CVE-2016-10507

<= 2.1.2

Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2.2.0 allows remote attackers to ca

6.5MEDIUM

CVE-2016-10506

<= 2.1.2

Division-by-zero vulnerabilities in the functions opj_pi_next_cprl, opj_pi_next_pcrl, and opj_pi_next_rpcl in pi.c in OpenJPEG bef

6.5MEDIUM

CVE-2016-10505

<= 2.1.2

NULL pointer dereference vulnerabilities in the imagetopnm function in convert.c, sycc444_to_rgb function in color.c, color_esycc_

6.5MEDIUM

CVE-2016-10504

<= 2.1.2

Heap-based buffer overflow vulnerability in the opj_mqc_byteout function in mqc.c in OpenJPEG before 2.2.0 allows remote attackers

6.5MEDIUM

CVE-2017-12982

< 2.3.0

The bmp_read_info_header function in bin/jp2/convertbmp.c in OpenJPEG 2.2.0 does not reject headers with a zero biBitCount, which

5.5MEDIUM

CVE-2016-4797

<= 2.1.0

Divide-by-zero vulnerability in the opj_tcd_init_tile function in tcd.c in OpenJPEG before 2.1.1 allows remote attackers to cause

5.5MEDIUM

CVE-2016-4796

<= 2.1.0

Heap-based buffer overflow in the color_cmyk_to_rgb in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a

5.5MEDIUM

CVE-2016-3183

<= 2.1.0

The sycc422_t_rgb function in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (out-of

5.5MEDIUM

CVE-2016-9675

< 1.5.2

openjpeg: A heap-based buffer overflow flaw was found in the patch for CVE-2013-6045. A crafted j2k image could cause the applicat

7.8HIGH

CVE-2016-9118

all versions

Heap Buffer Overflow (WRITE of size 4) in function pnmtoimage of convert.c:1719 in OpenJPEG 2.1.2.

5.3MEDIUM

CVE-2016-9117

all versions

NULL Pointer Access in function imagetopnm of convert.c(jp2):1289 in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must ope

6.5MEDIUM

CVE-2016-9116

all versions

NULL Pointer Access in function imagetopnm of convert.c:2226(jp2) in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must ope

6.5MEDIUM

CVE-2016-9115

all versions

Heap Buffer Over-read in function imagetotga of convert.c(jp2):942 in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must op

6.5MEDIUM

CVE-2016-9114

all versions

There is a NULL Pointer Access in function imagetopnm of convert.c:1943(jp2) of OpenJPEG 2.1.2. image-comps[compno].data is not as

7.5HIGH

CVE-2016-9113

all versions

There is a NULL pointer dereference in function imagetobmp of convertbmp.c:980 of OpenJPEG 2.1.2. image-comps[0].data is not assig

7.5HIGH

CVE-2016-9112

all versions

Floating Point Exception (aka FPE or divide by zero) in opj_pi_next_cprl function in openjp2/pi.c:523 in OpenJPEG 2.1.2.

7.5HIGH

CVE-2016-8332

all versions

A buffer overflow in OpenJPEG 2.1.1 causes arbitrary code execution when parsing a crafted image. An exploitable code execution vu

7.5HIGH

CVE-2016-7445

<= 2.1.1

convert.c in OpenJPEG before 2.1.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application

7.5HIGH

CVE-2016-7163

< 2.2.0

Integer overflow in the opj_pi_create_decode function in pi.c in OpenJPEG allows remote attackers to execute arbitrary code via a

7.8HIGH

CVE-2015-8871

<= 2.1.0

Use-after-free vulnerability in the opj_j2k_write_mco function in j2k.c in OpenJPEG before 2.1.1 allows remote attackers to have u

9.8CRITICAL

CVE-2016-1924

<= 2.1.0

The opj_tgt_reset function in OpenJpeg 2016.1.18 allows remote attackers to cause a denial of service (out-of-bounds read and appl

6.5MEDIUM

CVE-2016-1923

all versions

Heap-based buffer overflow in the opj_j2k_update_image_data function in OpenJpeg 2016.1.18 allows remote attackers to cause a deni

6.5MEDIUM

CVE-2013-6053

all versions

OpenJPEG 1.5.1 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based out-of-bo

CVE-2013-6887

all versions

OpenJPEG 1.5.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger NULL pointer dereferences

CVE-2013-4290

<= 1.5.1

Stack-based buffer overflow in OpenJPEG before 1.5.2 allows remote attackers to have unspecified impact via unknown vectors to (1)

CVE-2013-4289

<= 1.5.1

Multiple integer overflows in lib/openjp3d/jp3d.c in OpenJPEG before 1.5.2 allow remote attackers to have unspecified impact and v

CVE-2013-6054

<= 1.3

Heap-based buffer overflow in OpenJPEG 1.3 has unspecified impact and remote vectors, a different vulnerability than CVE-2013-6045

CVE-2013-6052

<= 1.3

OpenJPEG 1.3 and earlier allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based

CVE-2013-6045

<= 1.3

Multiple heap-based buffer overflows in OpenJPEG 1.3 and earlier might allow remote attackers to execute arbitrary code via unspec

CVE-2013-1447

<= 1.3

OpenJPEG 1.3 and earlier allows remote attackers to cause a denial of service (memory consumption or crash) via unspecified vector

CVE-2012-3535

<= 1.5

Heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service (application crash)

CVE-2012-3358

all versions

Multiple heap-based buffer overflows in the j2k_read_sot function in j2k.c in OpenJPEG 1.5 allow remote attackers to cause a denia

CVE-2009-5030

all versions

The tcd_free_encode function in tcd.c in OpenJPEG 1.3 through 1.5 allows remote attackers to cause a denial of service (memory cor

CVE-2012-1499

<= 1.4

The JPEG 2000 codec (jp2.c) in OpenJPEG before 1.5 allows remote attackers to execute arbitrary code via a crafted palette index i