openjpeg2 (SUSE:Linux Enterprise Module for Basesystem 15 SP6) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Basesystem 15 SP6 package openjpeg2, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2018-18088 — CVSS 6.5 (medium): OpenJPEG 2.3.0 has a NULL pointer dereference for "red" in the imagetopnm function of jp2/convert.c
• CVE-2024-56826 — CVSS 5.6 (medium): A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using…