Known vulnerabilities in OpenJPEG

Vendor: openjpeg.org
Software: OpenJPEG
Software CPE: cpe:2.3:a:openjpeg_org:openjpeg:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 60
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenJPEG OpenJPEG is affected by 60 known vulnerabilities: 28 high, 20 medium, 12 low Critical High Medium Low

Vulnerabilities (60)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114343 - NULL Pointer Dereference
CVE-2025-50952		 CWE-476 Medium
No
No
 2.5.1 21.08.2025 SB2025082139
SB2025082155
SB2025082156
and 5 more
#VU113802 - Heap-based Buffer Overflow
CVE-2025-54874		 CWE-122 High
No
No
 - 11.08.2025 SB2025081148
SB2025081159
SB2025081160
and 8 more
#VU102955 - Heap-based Buffer Overflow
CVE-2024-56827		 CWE-122 High
No
No
 2.5.3 17.01.2025 SB2024122753
SB20250117141
SB2025012340
and 4 more
#VU101965 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-39327		 CWE-835 Low
No
No
 2.5.3 27.12.2024 SB2024122753
SB2025021860
SB2025021865
and 4 more
#VU101962 - Heap-based Buffer Overflow
CVE-2024-56826		 CWE-122 High
No
No
 2.5.3 27.12.2024 SB2024122753
SB2024122754
SB2025011343
and 7 more
#VU79881 - Heap-based Buffer Overflow
CVE-2021-3575		 CWE-122 High
No
No
 - 23.08.2023 SB2022030440
SB2023082320
SB2024022658
and 4 more
#VU63450 - Access of Uninitialized Pointer
CVE-2022-1122		 CWE-824 Low
No
No
 2.5.0 19.05.2022 SB2022051908
SB2022090705
SB2022110864
and 16 more
#VU50018 - NULL Pointer Dereference
CVE-2020-27842		 CWE-476 Medium
No
No
 2.4.0 05.01.2021 SB2020122906
SB2021012622
SB2021040622
and 14 more
#VU50019 - Out-of-bounds read
CVE-2020-27843		 CWE-125 Medium
No
No
 2.4.0 05.01.2021 SB2020122906
SB2021012622
SB2021040622
and 13 more
#VU49186 - Use After Free
CVE-2020-15389.		 CWE-416 High
No
No
 2.4.0 29.12.2020 SB2020122906
#VU49185 - Heap-based Buffer Overflow
CVE-2020-27814		 CWE-122 High
No
No
 2.4.0 29.12.2020 SB2020122906
SB2020122920
SB2021012622
and 15 more
#VU49184 - Memory corruption
CVE-2020-27824		 CWE-119 High
No
No
 2.4.0 29.12.2020 SB2020122906
SB2020122921
SB2021040622
and 15 more
#VU49183 - Heap-based Buffer Overflow
CVE-2020-27841		 CWE-122 High
No
No
 2.4.0 29.12.2020 SB2020122906
SB2021012622
SB2021040622
and 12 more
#VU49182 - Heap-based Buffer Overflow
CVE-2020-27844		 CWE-122 High
No
No
 2.4.0 29.12.2020 SB2020122906
SB2021012622
SB2021030223
and 4 more
#VU49181 - Heap-based Buffer Overflow
CVE-2020-27845		 CWE-122 High
No
No
 2.4.0 29.12.2020 SB2020122906
SB2021012622
SB2021040622
and 14 more
#VU48907 - Heap-based Buffer Overflow
CVE-2020-27823		 CWE-122 High
No
No
 2.4.0 10.12.2020 SB2020121001
SB2020121002
SB2020122318
and 15 more
#VU25546 - Heap-based Buffer Overflow
CVE-2020-8112		 CWE-122 Medium
No
No
 2.4.0 24.02.2020 SB2020011450
SB2020022412
SB2020022413
and 20 more
#VU30360 - Memory corruption
CVE-2016-3182		 CWE-119 Low
No
No
 2.1.1 20.02.2020 SB2020022027
SB2016120813
SB2016070603
and 3 more
#VU24306 - Heap-based Buffer Overflow
CVE-2020-6851		 CWE-122 High
No
No
 2.4.0 14.01.2020 SB2020011450
SB2020012821
SB2020012918
and 15 more
#VU17319 - Resource exhaustion
CVE-2019-6988		 CWE-400 Low
No
No
 2.4.0 30.01.2019 SB2020011450


Showing elements 1 - 20 out of 60