Known vulnerabilities in openjpeg2 (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
openjpeg2 (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:openjpeg2_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
7
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
2.4.0-6ubuntu0.5
2.5.0-2ubuntu0.5
2.5.3-2.1ubuntu0.1
2.5.4-1ubuntu0.1
2.3.0-2+deb10u2ubuntu0.1~esm5
2.3.1-1ubuntu4.20.04.4+esm1
2.4.0-6ubuntu0.4
2.5.0-2ubuntu0.4
2.5.3-2ubuntu0.1
2.3.0-2+deb10u1
2.3.0-2+deb10u2
2.3.0-2+deb10u2build0.18.04.1
2.1.2-1.1+deb9u6
2.1.2-1.1+deb9u6build0.16.04.1
2.1.2-1.1+deb9u4
2.1.2-1.1+deb9u5
2.1.2-1.1+deb9u5build0.16.04.1
2.5.3-2
2.5.3-1~exp1
2.5.3-1~exp2
2.5.3-1
2.5.0-2ubuntu3
2.5.0-2ubuntu2
2.5.0-2ubuntu1.2
2.5.0-2ubuntu1
2.5.0-2ubuntu1.1
2.5.0-2ubuntu0.3
2.5.0-2ubuntu0.2
2.5.0-2ubuntu0.1
2.5.0-2build3
2.5.0-2build2
2.5.0-2build1
2.5.0-2
2.5.0-1build1
2.5.0-1
2.4.0-6ubuntu0.3
2.4.0-6ubuntu0.2
2.4.0-6ubuntu0.1
2.4.0-6
2.4.0-4
2.4.0-5
2.4.0-1
2.4.0-2
2.4.0-3
2.3.1-1ubuntu6
2.3.1-1ubuntu5
2.3.1-1ubuntu4.20.10.1
2.3.1-1ubuntu4.20.04.4
2.3.1-1ubuntu4.20.04.3
2.3.1-1ubuntu4.20.04.2
2.3.1-1ubuntu4.20.04.1
2.3.1-1ubuntu3
2.3.1-1ubuntu2
2.3.1-1ubuntu1
2.3.0-3
2.3.1-1
2.3.0
2.1.2
2.1.0
2.3.1
2.3.1-1ubuntu4
2.3.0-2build1
2.3.0-2build0.19.10.1
2.3.0-2build0.19.04.1
2.3.0-2build0.18.04.1
2.1.2-1.1+deb9u3
2.1.2-1.1+deb9u3build0.16.04.1
2.1.2-1.1+deb9u2build0.17.04.1
2.1.2-1.1+deb9u1
2.1.2-1.1+deb9u2
2.1.2-1.1+deb9u2build0.1
2.1.2-1.2
2.1.2-1.3
2.2.0-2
2.3.0-1
2.3.0-1.1
2.3.0-2
2.2.0-1
2.1.2-1
2.1.2-1.1
2.1.1-1ubuntu0.1
2.1.1-1
2.1.0-2.1ubuntu0.1
2.1.0-2.1build1
2.0.0-1
2.1.0-1
2.1.0-2
2.1.0-2.1
Vulnerabilities (7)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU114343 - NULL Pointer Dereference CVE-2025-50952 |
CWE-476 | Medium | 2.3.0-2+deb10u2ubuntu0.1~esm5, 2.3.1-1ubuntu4.20.04.4+esm1, 2.4.0-6ubuntu0.4, 2.5.0-2ubuntu0.4, 2.5.3-2ubuntu0.1 | 21.08.2025 |
SB2025082139 SB2025082155 SB2025082156 and 5 more |
||
| #VU113802 - Heap-based Buffer Overflow CVE-2025-54874 |
CWE-122 | High | 2.3.0-2+deb10u2ubuntu0.1~esm5, 2.3.1-1ubuntu4.20.04.4+esm1, 2.4.0-6ubuntu0.4, 2.5.0-2ubuntu0.4, 2.5.3-2ubuntu0.1 | 11.08.2025 |
SB2025081148 SB2025081159 SB2025081160 and 8 more |
||
| #VU20493 - Integer overflow CVE-2018-5785 |
CWE-190 | Low | 2.3.0-2build0.18.04.1 | 30.08.2019 |
SB2019013012 SB2019082113 SB2019031418 and 4 more |
||
| #VU20492 - NULL Pointer Dereference CVE-2018-18088 |
CWE-476 | Low | 2.3.0-2build0.18.04.1 | 30.08.2019 |
SB2019013012 SB2019082113 SB2018112218 and 5 more |
||
| #VU13982 - Divide By Zero CVE-2018-14423 |
CWE-369 | Low | 2.3.0-2build0.18.04.1 | 23.07.2018 |
SB2018072310 SB2019082113 SB2019010102 and 4 more |
||
| #VU13108 - Memory corruption CVE-2017-17480 |
CWE-119 | High | 2.3.0-2build0.18.04.1 | 31.05.2018 |
SB2018052319 SB2019082113 SB2018112217 |
||
| #VU11479 - Improper input validation CVE-2018-6616 |
CWE-20 | Low | 2.3.0-2build0.18.04.1 | 03.04.2018 |
SB2018020402 SB2019082113 SB2019010103 and 7 more |