https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T12:50:58.923574+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:7309 ALSA-2025:7309 — Moderate: openjpeg2 security update 2026-10-05T12:50:59.095942+00:00

Affected: AlmaLinux:9: openjpeg2, AlmaLinux:9: openjpeg2-devel, AlmaLinux:9: openjpeg2-tools

OpenJPEG is an open source library for reading and writing image files in JPEG2000 format.

Security Fix(es):

* openjpeg: heap buffer overflow in bin/common/color.c (CVE-2024-56826) * openjpeg: heap buffer overflow in lib/openjp2/j2k.c (CVE-2024-56827)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-03465 bdu:2025-03465 2026-10-05T12:50:59.096031+00:00 bdu:2025-03465 https://cve.radiocsirt.org/vuln/bell-cve-2024-56827 BELL-CVE-2024-56827 2026-10-05T12:50:59.096050+00:00

Affected: Alpaquita:23: openjpeg, Alpaquita:stream: openjpeg

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0524 certfr-2025-avi-0524 — De multiples vulnérabilités ont été découvertes dans VMware Tanzu. Elles permettent à un attaquant de provoquer un prob… 2026-10-05T12:50:59.096072+00:00 certfr-2025-avi-0524 https://cve.radiocsirt.org/vuln/euvd-2026-260286 EUVD-2026-260286 2026-10-05T12:50:59.096088+00:00 EUVD-2026-260286 https://cve.radiocsirt.org/vuln/fkie_cve-2024-56827 fkie_cve-2024-56827 2026-10-05T12:50:59.096099+00:00

A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application crash or other undefined behavior.

 https://cve.radiocsirt.org/vuln/ghsa-jq5v-29wx-7grq GHSA-jq5v-29wx-7grq 2026-10-05T12:50:59.096120+00:00

A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application crash or other undefined behavior.

 https://cve.radiocsirt.org/vuln/oesa-2025-1043 OESA-2025-1043 — openjpeg2 security update 2026-10-05T12:50:59.096151+00:00

Affected: openEuler:22.03-LTS-SP3: openjpeg2, openEuler:20.03-LTS-SP4: openjpeg2, openEuler:24.03-LTS: openjpeg2, openEuler:22.03-LTS-SP4: openjpeg2, openEuler:24.03-LTS-SP1: openjpeg2

OpenJPEG is an open-source JPEG 2000 codec written in C language. It has been developed in order to promote the use of JPEG 2000, a still-image compression standard from the Joint Photographic Experts Group (JPEG). Since April 2015, it is officially recognized by ISO/IEC and ITU-T as a JPEG 2000 Reference Software. Security Fix(es): (CVE-2024-56827)

 https://cve.radiocsirt.org/vuln/rhsa-2025:7309 RHSA-2025:7309 — Red Hat Security Advisory: openjpeg2 security update 2026-10-05T12:50:59.096194+00:00

openjpeg: heap buffer overflow in bin/common/color.c openjpeg: heap buffer overflow in lib/openjp2/j2k.c

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-56827 UBUNTU-CVE-2024-56827 2026-10-05T12:50:59.096214+00:00

Affected: Ubuntu:Pro:16.04:LTS: openjpeg2, Ubuntu:16.04:LTS: blender, Ubuntu:16.04:LTS: insighttoolkit4, Ubuntu:16.04:LTS: texmaker, Ubuntu:Pro:16.04:LTS: ghostscript, Ubuntu:Pro:18.04:LTS: ghostscript, Ubuntu:18.04:LTS: blender, Ubuntu:18.04:LTS: insighttoolkit4, Ubuntu:Pro:18.04:LTS: openjpeg2, Ubuntu:Pro:18.04:LTS: qtwebengine-opensource-src and 21 more

A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application crash or other undefined behavior.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0002 WID-SEC-W-2025-0002 — OpenJPEG: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-05T12:50:59.096274+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in OpenJPEG ausnutzen, um einen Denial of Service Angriff durchzuführen.