openjpeg2 (SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 package openjpeg2, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2018-18088 — CVSS 6.5 (medium): OpenJPEG 2.3.0 has a NULL pointer dereference for "red" in the imagetopnm function of jp2/convert.c
• CVE-2024-56826 — CVSS 5.6 (medium): A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using…
• CVE-2023-39327 — CVSS 4.3 (medium): A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning…