Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Package Hub 12 SP1 package openjpeg2, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.
CVEs (20)
CVE-2015-8871 — CVSS 9.8 (critical): Use-after-free vulnerability in the opj_j2k_write_mco function in j2k.c in OpenJPEG before 2.1.1 allows remote attackers to have…
CVE-2017-14164 — CVSS 8.8 (high): A size-validation issue was discovered in opj_j2k_write_sot in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability causes an…
CVE-2017-14039 — CVSS 8.8 (high): A heap-based buffer overflow was discovered in the opj_t2_encode_packet function in lib/openjp2/t2.c in OpenJPEG 2.2.0. The vulnerability…
CVE-2017-14040 — CVSS 8.8 (high): An invalid write access was discovered in bin/jp2/convert.c in OpenJPEG 2.2.0, triggering a crash in the tgatoimage function. The…
CVE-2017-14041 — CVSS 8.8 (high): A stack-based buffer overflow was discovered in the pgxtoimage function in bin/jp2/convert.c in OpenJPEG 2.2.0. The vulnerability causes an…
CVE-2016-7163 — CVSS 7.8 (high): Integer overflow in the opj_pi_create_decode function in pi.c in OpenJPEG allows remote attackers to execute arbitrary code via a crafted…
CVE-2016-9113 — CVSS 7.5 (high): There is a NULL pointer dereference in function imagetobmp of convertbmp.c:980 of OpenJPEG 2.1.2. image->comps[0].data is not assigned a…
CVE-2016-9114 — CVSS 7.5 (high): There is a NULL Pointer Access in function imagetopnm of convert.c:1943(jp2) of OpenJPEG 2.1.2. image->comps[compno].data is not assigned a…
CVE-2016-9112 — CVSS 7.5 (high): Floating Point Exception (aka FPE or divide by zero) in opj_pi_next_cprl function in openjp2/pi.c:523 in OpenJPEG 2.1.2.
CVE-2016-7445 — CVSS 7.5 (high): convert.c in OpenJPEG before 2.1.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash)…
CVE-2016-8332 — CVSS 7.5 (high): A buffer overflow in OpenJPEG 2.1.1 causes arbitrary code execution when parsing a crafted image. An exploitable code execution…
CVE-2016-9115 — CVSS 6.5 (medium): Heap Buffer Over-read in function imagetotga of convert.c(jp2):942 in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a…
CVE-2016-9573 — CVSS 6.5 (medium): An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2k_to_image tool. Converting a specially crafted JPEG2000 file to…
CVE-2016-9117 — CVSS 6.5 (medium): NULL Pointer Access in function imagetopnm of convert.c(jp2):1289 in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a…
CVE-2016-9116 — CVSS 6.5 (medium): NULL Pointer Access in function imagetopnm of convert.c:2226(jp2) in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a…
CVE-2016-10507 — CVSS 6.5 (medium): Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2.2.0 allows remote attackers to cause a…
CVE-2016-9572 — CVSS 5.9 (medium): A NULL pointer dereference flaw was found in the way openjpeg 2.1.2 decoded certain input images. Due to a logic error in the code…
CVE-2016-9118 — CVSS 5.3 (medium): Heap Buffer Overflow (WRITE of size 4) in function pnmtoimage of convert.c:1719 in OpenJPEG 2.1.2.
CVE-2016-9581 — CVSS 3.3 (low): An infinite loop vulnerability in tiftoimage that results in heap buffer overflow in convert_32s_C1P1 was found in openjpeg 2.1.2.
CVE-2016-9580 — CVSS 3.3 (low): An integer overflow vulnerability was found in tiftoimage function in openjpeg 2.1.2, resulting in heap buffer overflow.