Vulnerabilities > Uclouvain > Openjpeg > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-03-04 | CVE-2021-3575 | Out-of-bounds Write vulnerability in multiple products A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k file. | 7.8 |
| 2021-05-13 | CVE-2020-27823 | Classic Buffer Overflow vulnerability in multiple products A flaw was found in OpenJPEG’s encoder. | 7.8 |
| 2021-01-26 | CVE-2020-27814 | Heap-based Buffer Overflow vulnerability in multiple products A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. | 7.8 |
| 2021-01-05 | CVE-2020-27844 | Improper Input Validation vulnerability in multiple products A flaw was found in openjpeg's src/lib/openjp2/t2.c in versions prior to 2.4.0. | 7.8 |
| 2020-01-28 | CVE-2020-8112 | Out-of-bounds Write vulnerability in multiple products opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851. | 8.8 |
| 2020-01-13 | CVE-2020-6851 | Out-of-bounds Write vulnerability in multiple products OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation. | 7.5 |
| 2019-09-05 | CVE-2018-21010 | Out-of-bounds Write vulnerability in multiple products OpenJPEG before 2.3.1 has a heap buffer overflow in color_apply_icc_profile in bin/common/color.c. | 8.8 |
| 2019-06-26 | CVE-2018-20847 | Integer Overflow or Wraparound vulnerability in multiple products An improper computation of p_tx0, p_tx1, p_ty0 and p_ty1 in the function opj_get_encoding_parameters in openjp2/pi.c in OpenJPEG through 2.3.0 can lead to an integer overflow. | 8.8 |
| 2018-08-01 | CVE-2016-9580 | Heap-based Buffer Overflow vulnerability in Uclouvain Openjpeg 2.1.2 An integer overflow vulnerability was found in tiftoimage function in openjpeg 2.1.2, resulting in heap buffer overflow. | 8.8 |
| 2018-08-01 | CVE-2016-9581 | Infinite Loop vulnerability in Uclouvain Openjpeg 2.1.2 An infinite loop vulnerability in tiftoimage that results in heap buffer overflow in convert_32s_C1P1 was found in openjpeg 2.1.2. | 8.8 |