Known vulnerabilities in OpenJPEG

Vendor: openjpeg.org
Software: OpenJPEG
Software CPE: cpe:2.3:a:openjpeg_org:openjpeg:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 60
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenJPEG OpenJPEG is affected by 60 known vulnerabilities: 28 high, 20 medium, 12 low Critical High Medium Low

Vulnerabilities (60)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114343 - NULL Pointer Dereference
CVE-2025-50952		 CWE-476 Medium
No
No
 2.5.1 21.08.2025 SB2025082139
SB2025082155
SB2025082156
and 5 more
#VU113802 - Heap-based Buffer Overflow
CVE-2025-54874		 CWE-122 High
No
No
 - 11.08.2025 SB2025081148
SB2025081159
SB2025081160
and 8 more
#VU102955 - Heap-based Buffer Overflow
CVE-2024-56827		 CWE-122 High
No
No
 2.5.3 17.01.2025 SB2024122753
SB20250117141
SB2025012340
and 4 more
#VU101965 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-39327		 CWE-835 Low
No
No
 2.5.3 27.12.2024 SB2024122753
SB2025021860
SB2025021865
and 4 more
#VU101962 - Heap-based Buffer Overflow
CVE-2024-56826		 CWE-122 High
No
No
 2.5.3 27.12.2024 SB2024122753
SB2024122754
SB2025011343
and 7 more
#VU79881 - Heap-based Buffer Overflow
CVE-2021-3575		 CWE-122 High
No
No
 - 23.08.2023 SB2022030440
SB2023082320
SB2024022658
and 4 more
#VU63450 - Access of Uninitialized Pointer
CVE-2022-1122		 CWE-824 Low
No
No
 2.5.0 19.05.2022 SB2022051908
SB2022090705
SB2022110864
and 16 more
#VU50018 - NULL Pointer Dereference
CVE-2020-27842		 CWE-476 Medium
No
No
 2.4.0 05.01.2021 SB2020122906
SB2021012622
SB2021040622
and 14 more
#VU50019 - Out-of-bounds read
CVE-2020-27843		 CWE-125 Medium
No
No
 2.4.0 05.01.2021 SB2020122906
SB2021012622
SB2021040622
and 13 more
#VU49186 - Use After Free
CVE-2020-15389.		 CWE-416 High
No
No
 2.4.0 29.12.2020 SB2020122906
#VU49185 - Heap-based Buffer Overflow
CVE-2020-27814		 CWE-122 High
No
No
 2.4.0 29.12.2020 SB2020122906
SB2020122920
SB2021012622
and 15 more
#VU49184 - Memory corruption
CVE-2020-27824		 CWE-119 High
No
No
 2.4.0 29.12.2020 SB2020122906
SB2020122921
SB2021040622
and 15 more
#VU49183 - Heap-based Buffer Overflow
CVE-2020-27841		 CWE-122 High
No
No
 2.4.0 29.12.2020 SB2020122906
SB2021012622
SB2021040622
and 12 more
#VU49182 - Heap-based Buffer Overflow
CVE-2020-27844		 CWE-122 High
No
No
 2.4.0 29.12.2020 SB2020122906
SB2021012622
SB2021030223
and 4 more
#VU49181 - Heap-based Buffer Overflow
CVE-2020-27845		 CWE-122 High
No
No
 2.4.0 29.12.2020 SB2020122906
SB2021012622
SB2021040622
and 14 more
#VU48907 - Heap-based Buffer Overflow
CVE-2020-27823		 CWE-122 High
No
No
 2.4.0 10.12.2020 SB2020121001
SB2020121002
SB2020122318
and 15 more
#VU43630 - Heap-based Buffer Overflow
CVE-2012-3535		 CWE-122 Medium
No
No
 - 06.09.2012 SB2012090610
SB2012092306
SB2013101010
#VU43838 - Memory corruption
CVE-2012-3358		 CWE-119 High
No
No
 - 19.07.2012 SB2012071903
SB2012073002
SB2013101010
#VU43841 - Memory corruption
CVE-2009-5030		 CWE-119 Medium
No
No
 - 19.07.2012 SB2012071903
SB2012073002
SB2013101010
#VU44140 - Memory corruption
CVE-2012-1499		 CWE-119 High
No
No
 - 11.04.2012 SB2012041110
SB2012062109


Showing elements 1 - 20 out of 60