Out-of-bounds accesses in the functions pi_next_lrcp, pi_next_rlcp, pi_next_rpcl, pi_next_pcrl, pi_next_rpcl, and pi_next_cprl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service (application crash).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 26, 2019 |
| Debian | — | Upgrade openjpeg2 | May 15, 2025 | Jun 26, 2019 |
| Oracle Solaris | — | Upgrade image/library/openjpeg2 to version 2.3.1-11.4.11.0.1.2.0 on Solaris 11.4 | Aug 21, 2019 | Jun 26, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 26, 2019 |
| Suse | — | Upgrade openjpeg-develUpgrade libopenjp2-7Upgrade libopenjpeg1-32bitUpgrade libopenjpeg1Upgrade libopenjp2-7-32bitUpgrade openjpeg2-develUpgrade openjpeg-devel-32bitUpgrade openjpegUpgrade openjpeg2 | Aug 9, 2024 | Jun 26, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub