https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T16:31:48.509495+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:7309 ALSA-2025:7309 — Moderate: openjpeg2 security update 2026-10-05T16:31:48.521025+00:00

Affected: AlmaLinux:9: openjpeg2, AlmaLinux:9: openjpeg2-devel, AlmaLinux:9: openjpeg2-tools

OpenJPEG is an open source library for reading and writing image files in JPEG2000 format.

Security Fix(es):

* openjpeg: heap buffer overflow in bin/common/color.c (CVE-2024-56826) * openjpeg: heap buffer overflow in lib/openjp2/j2k.c (CVE-2024-56827)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-03457 bdu:2025-03457 2026-10-05T16:31:48.521097+00:00 bdu:2025-03457 https://cve.radiocsirt.org/vuln/bell-cve-2024-56826 BELL-CVE-2024-56826 2026-10-05T16:31:48.521115+00:00

Affected: Alpaquita:23: openjpeg, Alpaquita:stream: openjpeg

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0524 certfr-2025-avi-0524 — De multiples vulnérabilités ont été découvertes dans VMware Tanzu. Elles permettent à un attaquant de provoquer un prob… 2026-10-05T16:31:48.521135+00:00 certfr-2025-avi-0524 https://cve.radiocsirt.org/vuln/euvd-2026-260285 EUVD-2026-260285 2026-10-05T16:31:48.521150+00:00 EUVD-2026-260285 https://cve.radiocsirt.org/vuln/fkie_cve-2024-56826 fkie_cve-2024-56826 2026-10-05T16:31:48.521160+00:00

A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application crash or other undefined behavior.

 https://cve.radiocsirt.org/vuln/ghsa-75jh-69xw-fw3p GHSA-75jh-69xw-fw3p 2026-10-05T16:31:48.521181+00:00

A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application crash or other undefined behavior.

 https://cve.radiocsirt.org/vuln/oesa-2025-1031 OESA-2025-1031 — openjpeg2 security update 2026-10-05T16:31:48.521195+00:00

Affected: openEuler:22.03-LTS-SP4: openjpeg2, openEuler:24.03-LTS-SP1: openjpeg2, openEuler:22.03-LTS-SP3: openjpeg2, openEuler:20.03-LTS-SP4: openjpeg2, openEuler:22.03-LTS-SP1: openjpeg2, openEuler:24.03-LTS: openjpeg2

OpenJPEG is an open-source JPEG 2000 codec written in C language. It has been developed in order to promote the use of JPEG 2000, a still-image compression standard from the Joint Photographic Experts Group (JPEG). Since April 2015, it is officially recognized by ISO/IEC and ITU-T as a JPEG 2000 Reference Software. Security Fix(es): This bug is triggered when we use opj_decompress with the -r option and its argument set to 2. Version v2.5.2 also has this vulnerability. Reproducible: Always Steps to Reproduce: see https://github.com/uclouvain/openjpeg/issues/1563 References: https://github.com/uclouvain/openjpeg/issues/1563 https://github.com/uclouvain/openjpeg/commit/e492644fbded4c820ca55b5e50e598d346e850e8 https://bugzilla.redhat.com/show_bug.cgi?id=2333954(CVE-2024-56826)

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:14620-1 openSUSE-SU-2025:14620-1 — libopenjp2-7-2.5.3-2.1 on GA media 2026-10-05T16:31:48.521227+00:00

libopenjp2-7-2.5.3-2.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2025:0040-1 SUSE-SU-2025:0040-1 — Security update for openjpeg2 2026-10-05T16:31:48.521244+00:00

Security update for openjpeg2

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-56826 UBUNTU-CVE-2024-56826 2026-10-05T16:31:48.521258+00:00

Affected: Ubuntu:Pro:16.04:LTS: openjpeg2, Ubuntu:16.04:LTS: blender, Ubuntu:16.04:LTS: insighttoolkit4, Ubuntu:16.04:LTS: texmaker, Ubuntu:Pro:16.04:LTS: ghostscript, Ubuntu:Pro:18.04:LTS: ghostscript, Ubuntu:18.04:LTS: blender, Ubuntu:18.04:LTS: insighttoolkit4, Ubuntu:Pro:18.04:LTS: openjpeg2, Ubuntu:Pro:18.04:LTS: qtwebengine-opensource-src and 21 more

A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application crash or other undefined behavior.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0002 WID-SEC-W-2025-0002 — OpenJPEG: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-05T16:31:48.521310+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in OpenJPEG ausnutzen, um einen Denial of Service Angriff durchzuführen.