https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 16:31:36 +0000 https://cve.radiocsirt.org/vuln/alsa-2025:7309 <p><strong>Affected:</strong> AlmaLinux:9: openjpeg2, AlmaLinux:9: openjpeg2-devel, AlmaLinux:9: openjpeg2-tools</p> <p>OpenJPEG is an open source library for reading and writing image files in JPEG2000 format.</p> <p>Security Fix(es):</p> <p>* openjpeg: heap buffer overflow in bin/common/color.c (CVE-2024-56826) * openjpeg: heap buffer overflow in lib/openjp2/j2k.c (CVE-2024-56827)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: openjpeg2, AlmaLinux:9: openjpeg2-devel, AlmaLinux:9: openjpeg2-tools</p> <p>OpenJPEG is an open source library for reading and writing image files in JPEG2000 format.</p> <p>Security Fix(es):</p> <p>* openjpeg: heap buffer overflow in bin/common/color.c (CVE-2024-56826) * openjpeg: heap buffer overflow in lib/openjp2/j2k.c (CVE-2024-56827)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2025:7309 https://cve.radiocsirt.org/vuln/bdu:2025-03457 bdu:2025-03457 https://cve.radiocsirt.org/vuln/bdu:2025-03457 https://cve.radiocsirt.org/vuln/bell-cve-2024-56826 <p><strong>Affected:</strong> Alpaquita:23: openjpeg, Alpaquita:stream: openjpeg</p> <p><strong>Affected:</strong> Alpaquita:23: openjpeg, Alpaquita:stream: openjpeg</p> https://cve.radiocsirt.org/vuln/bell-cve-2024-56826 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0524 certfr-2025-avi-0524 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0524 https://cve.radiocsirt.org/vuln/euvd-2026-260285 EUVD-2026-260285 https://cve.radiocsirt.org/vuln/euvd-2026-260285 https://cve.radiocsirt.org/vuln/fkie_cve-2024-56826 <p>A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application crash or other undefined behavior.</p> <p>A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application crash or other undefined behavior.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-56826 https://cve.radiocsirt.org/vuln/ghsa-75jh-69xw-fw3p <p>A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application crash or other undefined behavior.</p> <p>A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application crash or other undefined behavior.</p> https://cve.radiocsirt.org/vuln/ghsa-75jh-69xw-fw3p https://cve.radiocsirt.org/vuln/oesa-2025-1031 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: openjpeg2, openEuler:24.03-LTS-SP1: openjpeg2, openEuler:22.03-LTS-SP3: openjpeg2, openEuler:20.03-LTS-SP4: openjpeg2, openEuler:22.03-LTS-SP1: openjpeg2, openEuler:24.03-LTS: openjpeg2</p> <p>OpenJPEG is an open-source JPEG 2000 codec written in C language. It has been developed in order to promote the use of JPEG 2000, a still-image compression standard from the Joint Photographic Experts Group (JPEG). Since April 2015, it is officially recognized by ISO/IEC and ITU-T as a JPEG 2000 Reference Software. Security Fix(es): This bug is triggered when we use opj_decompress with the -r option and its argument set to 2. Version v2.5.2 also has this vulnerability. Reproducible: Always Steps to Reproduce: see https://github.com/uclouvain/openjpeg/issues/1563 References: https://github.com/uclouvain/openjpeg/issues/1563 https://github.com/uclouvain/openjpeg/commit/e492644fbded4c820ca55b5e50e598d346e850e8 https://bugzilla.redhat.com/show_bug.cgi?id=2333954(CVE-2024-56826)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: openjpeg2, openEuler:24.03-LTS-SP1: openjpeg2, openEuler:22.03-LTS-SP3: openjpeg2, openEuler:20.03-LTS-SP4: openjpeg2, openEuler:22.03-LTS-SP1: openjpeg2, openEuler:24.03-LTS: openjpeg2</p> <p>OpenJPEG is an open-source JPEG 2000 codec written in C language. It has been developed in order to promote the use of JPEG 2000, a still-image compression standard from the Joint Photographic Experts Group (JPEG). Since April 2015, it is officially recognized by ISO/IEC and ITU-T as a JPEG 2000 Reference Software. Security Fix(es): This bug is triggered when we use opj_decompress with the -r option and its argument set to 2. Version v2.5.2 also has this vulnerability. Reproducible: Always Steps to Reproduce: see https://github.com/uclouvain/openjpeg/issues/1563 References: https://github.com/uclouvain/openjpeg/issues/1563 https://github.com/uclouvain/openjpeg/commit/e492644fbded4c820ca55b5e50e598d346e850e8 https://bugzilla.redhat.com/show_bug.cgi?id=2333954(CVE-2024-56826)</p> https://cve.radiocsirt.org/vuln/oesa-2025-1031 https://cve.radiocsirt.org/vuln/opensuse-su-2025:14620-1 <p>libopenjp2-7-2.5.3-2.1 on GA media</p> <p>libopenjp2-7-2.5.3-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:14620-1 https://cve.radiocsirt.org/vuln/suse-su-2025:0040-1 <p>Security update for openjpeg2</p> <p>Security update for openjpeg2</p> https://cve.radiocsirt.org/vuln/suse-su-2025:0040-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-56826 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: openjpeg2, Ubuntu:16.04:LTS: blender, Ubuntu:16.04:LTS: insighttoolkit4, Ubuntu:16.04:LTS: texmaker, Ubuntu:Pro:16.04:LTS: ghostscript, Ubuntu:Pro:18.04:LTS: ghostscript, Ubuntu:18.04:LTS: blender, Ubuntu:18.04:LTS: insighttoolkit4, Ubuntu:Pro:18.04:LTS: openjpeg2, Ubuntu:Pro:18.04:LTS: qtwebengine-opensource-src and 21 more</p> <p>A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application crash or other undefined behavior.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: openjpeg2, Ubuntu:16.04:LTS: blender, Ubuntu:16.04:LTS: insighttoolkit4, Ubuntu:16.04:LTS: texmaker, Ubuntu:Pro:16.04:LTS: ghostscript, Ubuntu:Pro:18.04:LTS: ghostscript, Ubuntu:18.04:LTS: blender, Ubuntu:18.04:LTS: insighttoolkit4, Ubuntu:Pro:18.04:LTS: openjpeg2, Ubuntu:Pro:18.04:LTS: qtwebengine-opensource-src and 21 more</p> <p>A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application crash or other undefined behavior.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-56826 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0002 <p>Ein lokaler Angreifer kann mehrere Schwachstellen in OpenJPEG ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein lokaler Angreifer kann mehrere Schwachstellen in OpenJPEG ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0002