Vulnerabilities > Uclouvain > High

DATE CVE VULNERABILITY TITLE RISK
2017-08-30 CVE-2017-14039 Out-of-bounds Write vulnerability in multiple products
A heap-based buffer overflow was discovered in the opj_t2_encode_packet function in lib/openjp2/t2.c in OpenJPEG 2.2.0.
network
low complexity
uclouvain debian CWE-787
8.8
2016-12-22 CVE-2016-9675 Out-of-bounds Write vulnerability in multiple products
openjpeg: A heap-based buffer overflow flaw was found in the patch for CVE-2013-6045.
local
low complexity
uclouvain redhat CWE-787
7.8
2016-10-30 CVE-2016-9114 NULL Pointer Dereference vulnerability in Uclouvain Openjpeg 2.1.2
There is a NULL Pointer Access in function imagetopnm of convert.c:1943(jp2) of OpenJPEG 2.1.2.
network
low complexity
uclouvain CWE-476
7.5
2016-10-30 CVE-2016-9113 NULL Pointer Dereference vulnerability in Uclouvain Openjpeg 2.1.2
There is a NULL pointer dereference in function imagetobmp of convertbmp.c:980 of OpenJPEG 2.1.2.
network
low complexity
uclouvain CWE-476
7.5
2016-10-29 CVE-2016-9112 Divide By Zero vulnerability in Uclouvain Openjpeg 2.1.2
Floating Point Exception (aka FPE or divide by zero) in opj_pi_next_cprl function in openjp2/pi.c:523 in OpenJPEG 2.1.2.
network
low complexity
uclouvain CWE-369
7.5
2016-10-28 CVE-2016-8332 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Uclouvain Openjpeg 2.1.1
A buffer overflow in OpenJPEG 2.1.1 causes arbitrary code execution when parsing a crafted image.
local
low complexity
uclouvain CWE-119
7.8
2016-10-03 CVE-2016-7445 NULL Pointer Dereference vulnerability in multiple products
convert.c in OpenJPEG before 2.1.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors involving the variable s.
network
low complexity
uclouvain opensuse CWE-476
7.5
2016-09-21 CVE-2016-7163 Integer Overflow or Wraparound vulnerability in multiple products
Integer overflow in the opj_pi_create_decode function in pi.c in OpenJPEG allows remote attackers to execute arbitrary code via a crafted JP2 file, which triggers an out-of-bounds read or write.
7.8