openjpeg2 vulnerabilities
CVEs whose affected-version data names the openjpeg2 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2024-56826Medium· 5.6Openjpeg: heap buffer overflow in bin/common/color.c
A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application crash or other undefined behavior.
▾ SunlitRed Hat · openjpegEPSS 0.31%via CVEORG
CVE-2024-56827Medium· 5.6Openjpeg: heap buffer overflow in lib/openjp2/j2k.c
A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application crash or other undefined behavior.
▾ SunlitRed Hat · openjpegEPSS 0.26%via CVEORG