https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 12:22:02 +0000 https://cve.radiocsirt.org/vuln/alsa-2021:4251 <p><strong>Affected:</strong> AlmaLinux:8: openjpeg2, AlmaLinux:8: openjpeg2-devel, AlmaLinux:8: openjpeg2-devel-docs, AlmaLinux:8: openjpeg2-tools</p> <p>OpenJPEG is an open source library for reading and writing image files in JPEG2000 format.</p> <p>The following packages have been upgraded to a later upstream version: openjpeg2 (2.4.0).</p> <p>Security Fix(es):</p> <p>* openjpeg: use-after-free and double-free via a mix of valid and invalid files in a directory operated on by the decompressor (CVE-2020-15389)</p> <p>* openjpeg: heap-buffer-overflow in lib/openjp2/mqc.c could result in DoS (CVE-2020-27814)</p> <p>* openjpeg: heap-buffer-overflow write in opj_tcd_dc_level_shift_encode() (CVE-2020-27823)</p> <p>* openjpeg: heap-buffer-overflow in color.c may lead to DoS or arbitrary code execution (CVE-2021-3575)</p> <p>* openjpeg: integer overflow in opj_t1_encode_cblks in src/lib/openjp2/t1.c (CVE-2018-5727)</p> <p>* openjpeg: integer overflow in opj_j2k_setup_encoder function in openjp2/j2k.c (CVE-2018-5785)</p> <p>* openjpeg: division-by-zero in functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c (CVE-2018-20845)</p> <p>* openjpeg: integer overflow in function opj_get_encoding_parameters in openjp2/pi.c (CVE-2018-20847)</p> <p>* openjpeg: denial of service in function opj_t1_encode_cblks in openjp2/t1.c (CVE-2019-12973)</p> <p>* openjpeg: global-buffer-overflow read in opj_dwt_calc_explicit_stepsizes() (CVE-2020-27824)</p> <p>* openjpeg: null pointer dereference in opj_tgt_reset function in lib/openjp2/tgt.c (CVE-2020-27842)</p> <p>* openjpeg: out-of-bounds read in opj_t2_encode_packet function in openjp2/t2.c (CVE-2020-27843)</p> <p>* openjpeg: heap-based buffer overflow in functions opj_pi…</p> <p><strong>Affected:</strong> AlmaLinux:8: openjpeg2, AlmaLinux:8: openjpeg2-devel, AlmaLinux:8: openjpeg2-devel-docs, AlmaLinux:8: openjpeg2-tools</p> <p>OpenJPEG is an open source library for reading and writing image files in JPEG2000 format.</p> <p>The following packages have been upgraded to a later upstream version: openjpeg2 (2.4.0).</p> <p>Security Fix(es):</p> <p>* openjpeg: use-after-free and double-free via a mix of valid and invalid files in a directory operated on by the decompressor (CVE-2020-15389)</p> <p>* openjpeg: heap-buffer-overflow in lib/openjp2/mqc.c could result in DoS (CVE-2020-27814)</p> <p>* openjpeg: heap-buffer-overflow write in opj_tcd_dc_level_shift_encode() (CVE-2020-27823)</p> <p>* openjpeg: heap-buffer-overflow in color.c may lead to DoS or arbitrary code execution (CVE-2021-3575)</p> <p>* openjpeg: integer overflow in opj_t1_encode_cblks in src/lib/openjp2/t1.c (CVE-2018-5727)</p> <p>* openjpeg: integer overflow in opj_j2k_setup_encoder function in openjp2/j2k.c (CVE-2018-5785)</p> <p>* openjpeg: division-by-zero in functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c (CVE-2018-20845)</p> <p>* openjpeg: integer overflow in function opj_get_encoding_parameters in openjp2/pi.c (CVE-2018-20847)</p> <p>* openjpeg: denial of service in function opj_t1_encode_cblks in openjp2/t1.c (CVE-2019-12973)</p> <p>* openjpeg: global-buffer-overflow read in opj_dwt_calc_explicit_stepsizes() (CVE-2020-27824)</p> <p>* openjpeg: null pointer dereference in opj_tgt_reset function in lib/openjp2/tgt.c (CVE-2020-27842)</p> <p>* openjpeg: out-of-bounds read in opj_t2_encode_packet function in openjp2/t2.c (CVE-2020-27843)</p> <p>* openjpeg: heap-based buffer overflow in functions opj_pi…</p> https://cve.radiocsirt.org/vuln/alsa-2021:4251 https://cve.radiocsirt.org/vuln/bdu:2021-03506 bdu:2021-03506 https://cve.radiocsirt.org/vuln/bdu:2021-03506 https://cve.radiocsirt.org/vuln/bell-cve-2020-27823 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2020-27823 https://cve.radiocsirt.org/vuln/euvd-2026-46747 EUVD-2026-46747 https://cve.radiocsirt.org/vuln/euvd-2026-46747 https://cve.radiocsirt.org/vuln/fkie_cve-2020-27823 <p>A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during encoding. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.</p> <p>A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during encoding. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-27823 https://cve.radiocsirt.org/vuln/ghsa-27x9-7vgq-h9f7 <p>A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during encoding. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.</p> <p>A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during encoding. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.</p> https://cve.radiocsirt.org/vuln/ghsa-27x9-7vgq-h9f7 https://cve.radiocsirt.org/vuln/gsd-2020-27823 gsd-2020-27823 https://cve.radiocsirt.org/vuln/gsd-2020-27823 https://cve.radiocsirt.org/vuln/msrc_cve-2020-27823 msrc_CVE-2020-27823 https://cve.radiocsirt.org/vuln/msrc_cve-2020-27823 https://cve.radiocsirt.org/vuln/oesa-2021-1234 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: openjpeg2</p> <p>OpenJPEG is an open-source JPEG 2000 codec written in C language. It has been developed in order to promote the use of JPEG 2000, a still-image compression standard from the Joint Photographic Experts Group (JPEG). Since April 2015, it is officially recognized by ISO/IEC and ITU-T as a JPEG 2000 Reference Software. Security Fix(es): A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during encoding. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.(CVE-2020-27823) A flaw was found in OpenJPEG’s encoder in the opj_dwt_calc_explicit_stepsizes() function. This flaw allows an attacker who can supply crafted input to decomposition levels to cause a buffer overflow. The highest threat from this vulnerability is to system availability.(CVE-2020-27824) opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851.(CVE-2020-8112)</p> <p>AOpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation.(CVE-2020-6851)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: openjpeg2</p> <p>OpenJPEG is an open-source JPEG 2000 codec written in C language. It has been developed in order to promote the use of JPEG 2000, a still-image compression standard from the Joint Photographic Experts Group (JPEG). Since April 2015, it is officially recognized by ISO/IEC and ITU-T as a JPEG 2000 Reference Software. Security Fix(es): A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during encoding. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.(CVE-2020-27823) A flaw was found in OpenJPEG’s encoder in the opj_dwt_calc_explicit_stepsizes() function. This flaw allows an attacker who can supply crafted input to decomposition levels to cause a buffer overflow. The highest threat from this vulnerability is to system availability.(CVE-2020-27824) opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851.(CVE-2020-8112)</p> <p>AOpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation.(CVE-2020-6851)</p> https://cve.radiocsirt.org/vuln/oesa-2021-1234 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13571-1 <p>libopenjp2-7-2.5.0-4.1 on GA media</p> <p>libopenjp2-7-2.5.0-4.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13571-1 https://cve.radiocsirt.org/vuln/suse-su-2022:1129-1 <p>Security update for openjpeg2</p> <p>Security update for openjpeg2</p> https://cve.radiocsirt.org/vuln/suse-su-2022:1129-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-27823 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: openjpeg2, Ubuntu:16.04:LTS: blender, Ubuntu:16.04:LTS: insighttoolkit4, Ubuntu:16.04:LTS: texmaker, Ubuntu:18.04:LTS: openjpeg2, Ubuntu:18.04:LTS: blender, Ubuntu:18.04:LTS: insighttoolkit4, Ubuntu:Pro:18.04:LTS: qtwebengine-opensource-src, Ubuntu:Pro:18.04:LTS: texmaker, Ubuntu:20.04:LTS: openjpeg2 and 18 more</p> <p>A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during encoding. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: openjpeg2, Ubuntu:16.04:LTS: blender, Ubuntu:16.04:LTS: insighttoolkit4, Ubuntu:16.04:LTS: texmaker, Ubuntu:18.04:LTS: openjpeg2, Ubuntu:18.04:LTS: blender, Ubuntu:18.04:LTS: insighttoolkit4, Ubuntu:Pro:18.04:LTS: qtwebengine-opensource-src, Ubuntu:Pro:18.04:LTS: texmaker, Ubuntu:20.04:LTS: openjpeg2 and 18 more</p> <p>A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during encoding. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-27823 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1880 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in OpenJPEG ausnutzen, um beliebigen Programmcode mit Benutzerrechten auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in OpenJPEG ausnutzen, um beliebigen Programmcode mit Benutzerrechten auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1880