Heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted JPEG2000 file.
CVSS Details
- CVSS 3.1 Base Score: 6.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openjpeg | Aug 30, 2017 | Sep 5, 2012 |
| Centos_linux | — | Upgrade openjpegUpgrade openjpeg-develUpgrade openjpeg-libs | Dec 1, 2016 | Sep 5, 2012 |
| Freebsd | — | Upgrade openjpeg | Dec 10, 2025 | May 24, 2014 |
| Gentoo Linux | — | Upgrade media-libs/openjpeg. | Oct 30, 2017 | Sep 5, 2012 |
| Oracle_linux | — | Upgrade openjpeg-develUpgrade openjpeg-libsUpgrade openjpeg | Oct 16, 2024 | Sep 5, 2012 |
| Suse | — | Upgrade libopenjpeg1Upgrade openjpeg-devel | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade openjpeg | Nov 19, 2024 | Sep 5, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub