Unscored DLA-1579-1 2 CVEs

openjpeg2 - security update

Published Nov 19, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 8	openjpeg2	2.1.0-2+deb8u5

Vulnerabilities 2

Unscored —

CVE-2017-17480

In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtovolume function in jp3d/convert.c. The vuln…

openjpeg2 openjpeg2 openjpeg Debian Ubuntu Alpine

Dec 8, 2017
Unscored —

CVE-2018-18088

OpenJPEG 2.3.0 has a NULL pointer dereference for "red" in the imagetopnm function of jp2/convert.c

openjpeg2 openjpeg2 openjpeg openjpeg Debian Ubuntu Alpine

Oct 9, 2018