kakadusoftware records
4 published records for vendor kakadusoftware.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 25%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-787 Out-of-bounds Write2
- CWE-191 Integer Underflow (Wrap or Wraparound)1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
36Monitor | CVE-2019-5144No exploit | An exploitable heap underflow vulnerability exists in the derive_taps_and_gains function in kdu_v7ar.dll of Kakadu Software SDK 7.10.2.kakadusoftware · kakadu software · CWE-191 | High8.8 | — | 2.4% | Dec 12, 2019 |
31Monitor | CVE-2017-2811No exploit | A code execution vulnerability exists in the Kakadu SDK 7.9's parsing of compressed JPEG 2000 images.kakadusoftware · kakadu sdk · CWE-787 | High7.8 | — | 1.4% | Apr 24, 2018 |
31Monitor | CVE-2017-2812No exploit | A code execution vulnerability exists in the kdu_buffered_expand function of the Kakadu SDK 7.9.kakadusoftware · kakadu sdk · CWE-787 | High7.8 | — | 1.4% | Apr 24, 2018 |
30Monitor | CVE-2023-6562No exploit | JPX Fragment List (flst) box vulnerability in Kakadu 7.9 allows an attacker to exfiltrate local and remote files reachable by a server if thkakadusoftware · kakadu sdk · CWE-22 | High7.5 | — | 0.7% | Dec 20, 2023 |
- CVE-2019-514436Monitor
An exploitable heap underflow vulnerability exists in the derive_taps_and_gains function in kdu_v7ar.dll of Kakadu Software SDK 7.10.2.
HighCVSS 8.8No exploitEPSS 2%kakadusoftware · kakadu softwareDec 12, 2019
- CVE-2017-281131Monitor
A code execution vulnerability exists in the Kakadu SDK 7.9's parsing of compressed JPEG 2000 images.
HighCVSS 7.8No exploitEPSS 1%kakadusoftware · kakadu sdkApr 24, 2018
- CVE-2017-281231Monitor
A code execution vulnerability exists in the kdu_buffered_expand function of the Kakadu SDK 7.9.
HighCVSS 7.8No exploitEPSS 1%kakadusoftware · kakadu sdkApr 24, 2018
- CVE-2023-656230Monitor
JPX Fragment List (flst) box vulnerability in Kakadu 7.9 allows an attacker to exfiltrate local and remote files reachable by a server if th
HighCVSS 7.5No exploitEPSS 0%kakadusoftware · kakadu sdkDec 20, 2023