https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:31:23.604925+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:7645 ALSA-2022:7645 — Low: openjpeg2 security update 2026-10-03T07:31:23.620750+00:00

Affected: AlmaLinux:8: openjpeg2, AlmaLinux:8: openjpeg2-devel, AlmaLinux:8: openjpeg2-devel-docs, AlmaLinux:8: openjpeg2-tools

OpenJPEG is an open source library for reading and writing image files in JPEG2000 format.

Security Fix(es):

* openjpeg: segmentation fault in opj2_decompress due to uninitialized pointer (CVE-2022-1122)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-03838 bdu:2023-03838 2026-10-03T07:31:23.620818+00:00 bdu:2023-03838 https://cve.radiocsirt.org/vuln/bell-cve-2022-1122 Withdrawn: BELL-CVE-2022-1122 — CVE-2022-1122 does not affect BellSoft software 2026-10-03T07:31:23.620836+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/euvd-2026-257658 EUVD-2026-257658 2026-10-03T07:31:23.620851+00:00 EUVD-2026-257658 https://cve.radiocsirt.org/vuln/fkie_cve-2022-1122 fkie_cve-2022-1122 2026-10-03T07:31:23.620863+00:00

A flaw was found in the opj2_decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free() on an uninitialized pointer, leading to a segmentation fault and a denial of service.

 https://cve.radiocsirt.org/vuln/ghsa-4x8v-rchj-qvpf GHSA-4x8v-rchj-qvpf 2026-10-03T07:31:23.620884+00:00

A flaw was found in the opj2_decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free() on an uninitialized pointer, leading to a segmentation fault and a denial of service.

 https://cve.radiocsirt.org/vuln/gsd-2022-1122 gsd-2022-1122 2026-10-03T07:31:23.620899+00:00 gsd-2022-1122 https://cve.radiocsirt.org/vuln/oesa-2022-1678 OESA-2022-1678 — openjpeg2 security update 2026-10-03T07:31:23.620908+00:00

Affected: openEuler:20.03-LTS-SP1: openjpeg2, openEuler:20.03-LTS-SP3: openjpeg2, openEuler:22.03-LTS: openjpeg2

OpenJPEG is an open-source JPEG 2000 codec written in C language. It has been developed in order to promote the use of JPEG 2000, a still-image compression standard from the Joint Photographic Experts Group (JPEG). Since April 2015, it is officially recognized by ISO/IEC and ITU-T as a JPEG 2000 Reference Software.

Security Fix(es): A flaw was found in the opj2_decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free() on an uninitialized pointer, leading to a segmentation fault and a denial of service.(CVE-2022-1122)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13571-1 openSUSE-SU-2024:13571-1 — libopenjp2-7-2.5.0-4.1 on GA media 2026-10-03T07:31:23.620934+00:00

libopenjp2-7-2.5.0-4.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2022:1129-1 SUSE-SU-2022:1129-1 — Security update for openjpeg2 2026-10-03T07:31:23.620955+00:00

Security update for openjpeg2

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-1122 UBUNTU-CVE-2022-1122 2026-10-03T07:31:23.620973+00:00

Affected: Ubuntu:Pro:16.04:LTS: openjpeg2, Ubuntu:16.04:LTS: blender, Ubuntu:16.04:LTS: insighttoolkit4, Ubuntu:16.04:LTS: texmaker, Ubuntu:18.04:LTS: blender, Ubuntu:18.04:LTS: insighttoolkit4, Ubuntu:Pro:18.04:LTS: openjpeg2, Ubuntu:Pro:18.04:LTS: qtwebengine-opensource-src, Ubuntu:Pro:18.04:LTS: texmaker, Ubuntu:20.04:LTS: openjpeg2 and 18 more

A flaw was found in the opj2_decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free() on an uninitialized pointer, leading to a segmentation fault and a denial of service.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0923 WID-SEC-W-2022-0923 — OpenJPEG: Schwachstelle ermöglicht Denial of Service 2026-10-03T07:31:23.621023+00:00

Ein lokaler Angreifer kann eine Schwachstelle in OpenJPEG ausnutzen, um einen Denial of Service Angriff durchzuführen.