openjpeg: A heap-based buffer overflow flaw was found in the patch for CVE-2013-6045. A crafted j2k image could cause the application to crash, or potentially execute arbitrary code.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | amazon-linux-upgrade-openjpeg | Mar 23, 2017 | Dec 22, 2016 |
| Centos_linux | — | centos-upgrade-openjpegcentos-upgrade-openjpeg-debuginfocentos-upgrade-openjpeg-develcentos-upgrade-openjpeg-libs | Mar 20, 2017 | Dec 22, 2016 |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-openjpeg-libs | Nov 30, 2017 | Dec 22, 2016 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-openjpeg-libs | Nov 30, 2017 | Dec 22, 2016 | |
| Oracle_linux | — | oracle-linux-upgrade-openjpegoracle-linux-upgrade-openjpeg-develoracle-linux-upgrade-openjpeg-libs | Mar 20, 2017 | Sep 26, 2016 |
| Redhat_linux | — | redhat-upgrade-openjpegredhat-upgrade-openjpeg-debuginforedhat-upgrade-openjpeg-develredhat-upgrade-openjpeg-libs | Mar 20, 2017 | Dec 22, 2016 |
| Ubuntu | no-fix-ubuntu-package | Jun 26, 2025 | Dec 22, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub