Vulnerabilities > Uclouvain > Openjpeg
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2018-10-09 | CVE-2018-18088 | NULL Pointer Dereference vulnerability in multiple products OpenJPEG 2.3.0 has a NULL pointer dereference for "red" in the imagetopnm function of jp2/convert.c | 4.3 |
| 2018-09-03 | CVE-2018-16376 | Out-of-bounds Write vulnerability in Uclouvain Openjpeg 2.3.0 An issue was discovered in OpenJPEG 2.3.0. | 6.8 |
| 2018-09-03 | CVE-2018-16375 | Out-of-bounds Write vulnerability in Uclouvain Openjpeg 2.3.0 An issue was discovered in OpenJPEG 2.3.0. | 6.8 |
| 2018-08-01 | CVE-2016-9580 | Heap-based Buffer Overflow vulnerability in Uclouvain Openjpeg 2.1.2 An integer overflow vulnerability was found in tiftoimage function in openjpeg 2.1.2, resulting in heap buffer overflow. | 8.8 |
| 2018-08-01 | CVE-2016-9572 | NULL Pointer Dereference vulnerability in multiple products A NULL pointer dereference flaw was found in the way openjpeg 2.1.2 decoded certain input images. | 6.5 |
| 2018-08-01 | CVE-2016-9581 | Infinite Loop vulnerability in Uclouvain Openjpeg 2.1.2 An infinite loop vulnerability in tiftoimage that results in heap buffer overflow in convert_32s_C1P1 was found in openjpeg 2.1.2. | 8.8 |
| 2018-08-01 | CVE-2016-9573 | Out-of-bounds Read vulnerability in multiple products An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2k_to_image tool. | 8.1 |
| 2018-07-19 | CVE-2018-14423 | Divide By Zero vulnerability in multiple products Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in lib/openjp3d/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service (application crash). | 5.0 |
| 2018-04-10 | CVE-2014-0158 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products Heap-based buffer overflow in the JPEG2000 image tile decoder in OpenJPEG before 1.5.2 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file because of incorrect j2k_decode, j2k_read_eoc, and tcd_decode_tile interaction, a related issue to CVE-2013-6045. | 6.8 |
| 2018-03-02 | CVE-2018-7648 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Uclouvain Openjpeg 2.3.0 An issue was discovered in mj2/opj_mj2_extract.c in OpenJPEG 2.3.0. | 7.5 |