uclouvain records
82 published records for vendor uclouvain.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 11
- With a fix record
- 87.8%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer20
- CWE-787 Out-of-bounds Write13
- CWE-476 NULL Pointer Dereference9
- CWE-20 Improper Input Validation6
- CWE-190 Integer Overflow or Wraparound6
- CWE-125 Out-of-bounds Read5
The weakness classes this vendor ships most often: where to look.
CWEAll records
82 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
42Plan | CVE-2012-3358No exploit | Multiple heap-based buffer overflows in the j2k_read_sot function in j2k.c in OpenJPEG 1.5 allow remote attackers to cause a denial of serviuclouvain · openjpeg · CWE-119 | Critical10.0 | — | 7.6% | Jul 18, 2012 |
41Plan | CVE-2017-17480No exploit | In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtovolume function in jp3d/convert.c.uclouvain · openjpeg · CWE-787 | Critical9.8 | — | 5.1% | Dec 8, 2017 |
41Plan | CVE-2013-4290No exploit | Stack-based buffer overflow in OpenJPEG before 1.5.2 allows remote attackers to have unspecified impact via unknown vectors to (1) lib/openjuclouvain · openjpeg · CWE-119 | Critical10.0 | — | 2.9% | Apr 18, 2014 |
41Plan | CVE-2013-4289No exploit | Multiple integer overflows in lib/openjp3d/jp3d.c in OpenJPEG before 1.5.2 allow remote attackers to have unspecified impact and vectors, whuclouvain · openjpeg · CWE-189 | Critical10.0 | — | 2.7% | Apr 18, 2014 |
40Plan | CVE-2017-17479No exploit | In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtoimage function in jpwl/convert.c.uclouvain · openjpeg · CWE-787 | Critical9.8 | — | 4.0% | Dec 8, 2017 |
40Plan | CVE-2015-8871No exploit | Use-after-free vulnerability in the opj_j2k_write_mco function in j2k.c in OpenJPEG before 2.1.1 allows remote attackers to have unspecifieddebian · debian linux · CWE-416 | Critical9.8 | — | 3.5% | Sep 21, 2016 |
39Monitor | CVE-2012-1499No exploit | The JPEG 2000 codec (jp2.c) in OpenJPEG before 1.5 allows remote attackers to execute arbitrary code via a crafted palette index in a CMAP ruclouvain · openjpeg · CWE-119 | Critical9.3 | — | 5.0% | Apr 11, 2012 |
39Monitor | CVE-2018-7648No exploit | An issue was discovered in mj2/opj_mj2_extract.c in OpenJPEG 2.3.0.uclouvain · openjpeg · CWE-119 | Critical9.8 | — | 1.6% | Mar 2, 2018 |
37Monitor | CVE-2017-14041No exploit | A stack-based buffer overflow was discovered in the pgxtoimage function in bin/jp2/convert.c in OpenJPEG 2.2.0.uclouvain · openjpeg · CWE-787 | High8.8 | — | 5.6% | Aug 30, 2017 |
37Monitor | CVE-2017-14164No exploit | A size-validation issue was discovered in opj_j2k_write_sot in lib/openjp2/j2k.c in OpenJPEG 2.2.0.uclouvain · openjpeg · CWE-119 | High8.8 | — | 5.4% | Sep 6, 2017 |
37Monitor | CVE-2017-14151No exploit | An off-by-one error was discovered in opj_tcd_code_block_enc_allocate_data in lib/openjp2/tcd.c in OpenJPEG 2.2.0.uclouvain · openjpeg · CWE-119 | High8.8 | — | 5.1% | Sep 5, 2017 |
37Monitor | CVE-2017-14152No exploit | A mishandled zero case was discovered in opj_j2k_set_cinema_parameters in lib/openjp2/j2k.c in OpenJPEG 2.2.0.uclouvain · openjpeg · CWE-787 | High8.8 | — | 5.1% | Sep 5, 2017 |
36Monitor | CVE-2017-14040No exploit | An invalid write access was discovered in bin/jp2/convert.c in OpenJPEG 2.2.0, triggering a crash in the tgatoimage function.uclouvain · openjpeg · CWE-787 | High8.8 | — | 4.7% | Aug 30, 2017 |
36Monitor | CVE-2017-14039No exploit | A heap-based buffer overflow was discovered in the opj_t2_encode_packet function in lib/openjp2/t2.c in OpenJPEG 2.2.0.uclouvain · openjpeg · CWE-787 | High8.8 | — | 4.3% | Aug 30, 2017 |
36Monitor | CVE-2020-8112No exploit | opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a uclouvain · openjpeg · CWE-787 | High8.8 | — | 3.6% | Jan 28, 2020 |
36Monitor | CVE-2018-16376No exploit | An issue was discovered in OpenJPEG 2.3.0.uclouvain · openjpeg · CWE-787 | High8.8 | — | 2.8% | Sep 2, 2018 |
36Monitor | CVE-2018-20847No exploit | An improper computation of p_tx0, p_tx1, p_ty0 and p_ty1 in the function opj_get_encoding_parameters in openjp2/pi.c in OpenJPEG through 2.3uclouvain · openjpeg · CWE-190 | High8.8 | — | 2.3% | Jun 26, 2019 |
36Monitor | CVE-2018-16375No exploit | An issue was discovered in OpenJPEG 2.3.0.uclouvain · openjpeg · CWE-787 | High8.8 | — | 2.2% | Sep 2, 2018 |
36Monitor | CVE-2018-21010No exploit | OpenJPEG before 2.3.1 has a heap buffer overflow in color_apply_icc_profile in bin/common/color.c.uclouvain · openjpeg · CWE-787 | High8.8 | — | 2.0% | Sep 5, 2019 |
36Monitor | CVE-2016-9580No exploit | An integer overflow vulnerability was found in tiftoimage function in openjpeg 2.1.2, resulting in heap buffer overflow.uclouvain · openjpeg · CWE-122 | High8.8 | — | 1.9% | Aug 1, 2018 |
36Monitor | CVE-2016-9581No exploit | An infinite loop vulnerability in tiftoimage that results in heap buffer overflow in convert_32s_C1P1 was found in openjpeg 2.1.2.uclouvain · openjpeg · CWE-122 | High8.8 | — | 1.9% | Aug 1, 2018 |
36Monitor | CVE-2014-0158No exploit | Heap-based buffer overflow in the JPEG2000 image tile decoder in OpenJPEG before 1.5.2 allows remote attackers to cause a denial of service uclouvain · openjpeg · CWE-119 | High8.8 | — | 1.7% | Apr 10, 2018 |
33Monitor | CVE-2016-7163No exploit | Integer overflow in the opj_pi_create_decode function in pi.c in OpenJPEG allows remote attackers to execute arbitrary code via a crafted JPuclouvain · openjpeg · CWE-190 | High7.8 | — | 7.1% | Sep 21, 2016 |
33Monitor | CVE-2016-9573No exploit | An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2k_to_image tool.uclouvain · openjpeg · CWE-125 | High8.1 | — | 2.4% | Aug 1, 2018 |
32Monitor | CVE-2013-6045No exploit | Multiple heap-based buffer overflows in OpenJPEG 1.3 and earlier might allow remote attackers to execute arbitrary code via unspecified vectuclouvain · openjpeg · CWE-119 | High7.5 | — | 5.5% | Dec 12, 2013 |
- CVE-2012-335842Plan
Multiple heap-based buffer overflows in the j2k_read_sot function in j2k.c in OpenJPEG 1.5 allow remote attackers to cause a denial of servi
CriticalCVSS 10.0No exploitEPSS 7%uclouvain · openjpegJul 18, 2012
- CVE-2017-1748041Plan
In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtovolume function in jp3d/convert.c.
CriticalCVSS 9.8No exploitEPSS 5%uclouvain · openjpegDec 8, 2017
- CVE-2013-429041Plan
Stack-based buffer overflow in OpenJPEG before 1.5.2 allows remote attackers to have unspecified impact via unknown vectors to (1) lib/openj
CriticalCVSS 10.0No exploitEPSS 2%uclouvain · openjpegApr 18, 2014
- CVE-2013-428941Plan
Multiple integer overflows in lib/openjp3d/jp3d.c in OpenJPEG before 1.5.2 allow remote attackers to have unspecified impact and vectors, wh
CriticalCVSS 10.0No exploitEPSS 2%uclouvain · openjpegApr 18, 2014
- CVE-2017-1747940Plan
In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtoimage function in jpwl/convert.c.
CriticalCVSS 9.8No exploitEPSS 4%uclouvain · openjpegDec 8, 2017
- CVE-2015-887140Plan
Use-after-free vulnerability in the opj_j2k_write_mco function in j2k.c in OpenJPEG before 2.1.1 allows remote attackers to have unspecified
CriticalCVSS 9.8No exploitEPSS 3%debian · debian linuxSep 21, 2016
- CVE-2012-149939Monitor
The JPEG 2000 codec (jp2.c) in OpenJPEG before 1.5 allows remote attackers to execute arbitrary code via a crafted palette index in a CMAP r
CriticalCVSS 9.3No exploitEPSS 5%uclouvain · openjpegApr 11, 2012
- CVE-2018-764839Monitor
An issue was discovered in mj2/opj_mj2_extract.c in OpenJPEG 2.3.0.
CriticalCVSS 9.8No exploitEPSS 1%uclouvain · openjpegMar 2, 2018
- CVE-2017-1404137Monitor
A stack-based buffer overflow was discovered in the pgxtoimage function in bin/jp2/convert.c in OpenJPEG 2.2.0.
HighCVSS 8.8No exploitEPSS 5%uclouvain · openjpegAug 30, 2017
- CVE-2017-1416437Monitor
A size-validation issue was discovered in opj_j2k_write_sot in lib/openjp2/j2k.c in OpenJPEG 2.2.0.
HighCVSS 8.8No exploitEPSS 5%uclouvain · openjpegSep 6, 2017
- CVE-2017-1415137Monitor
An off-by-one error was discovered in opj_tcd_code_block_enc_allocate_data in lib/openjp2/tcd.c in OpenJPEG 2.2.0.
HighCVSS 8.8No exploitEPSS 5%uclouvain · openjpegSep 5, 2017
- CVE-2017-1415237Monitor
A mishandled zero case was discovered in opj_j2k_set_cinema_parameters in lib/openjp2/j2k.c in OpenJPEG 2.2.0.
HighCVSS 8.8No exploitEPSS 5%uclouvain · openjpegSep 5, 2017
- CVE-2017-1404036Monitor
An invalid write access was discovered in bin/jp2/convert.c in OpenJPEG 2.2.0, triggering a crash in the tgatoimage function.
HighCVSS 8.8No exploitEPSS 4%uclouvain · openjpegAug 30, 2017
- CVE-2017-1403936Monitor
A heap-based buffer overflow was discovered in the opj_t2_encode_packet function in lib/openjp2/t2.c in OpenJPEG 2.2.0.
HighCVSS 8.8No exploitEPSS 4%uclouvain · openjpegAug 30, 2017
- CVE-2020-811236Monitor
opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a
HighCVSS 8.8No exploitEPSS 3%uclouvain · openjpegJan 28, 2020
- CVE-2018-1637636Monitor
An issue was discovered in OpenJPEG 2.3.0.
HighCVSS 8.8No exploitEPSS 2%uclouvain · openjpegSep 2, 2018
- CVE-2018-2084736Monitor
An improper computation of p_tx0, p_tx1, p_ty0 and p_ty1 in the function opj_get_encoding_parameters in openjp2/pi.c in OpenJPEG through 2.3
HighCVSS 8.8No exploitEPSS 2%uclouvain · openjpegJun 26, 2019
- CVE-2018-1637536Monitor
An issue was discovered in OpenJPEG 2.3.0.
HighCVSS 8.8No exploitEPSS 2%uclouvain · openjpegSep 2, 2018
- CVE-2018-2101036Monitor
OpenJPEG before 2.3.1 has a heap buffer overflow in color_apply_icc_profile in bin/common/color.c.
HighCVSS 8.8No exploitEPSS 2%uclouvain · openjpegSep 5, 2019
- CVE-2016-958036Monitor
An integer overflow vulnerability was found in tiftoimage function in openjpeg 2.1.2, resulting in heap buffer overflow.
HighCVSS 8.8No exploitEPSS 1%uclouvain · openjpegAug 1, 2018
- CVE-2016-958136Monitor
An infinite loop vulnerability in tiftoimage that results in heap buffer overflow in convert_32s_C1P1 was found in openjpeg 2.1.2.
HighCVSS 8.8No exploitEPSS 1%uclouvain · openjpegAug 1, 2018
- CVE-2014-015836Monitor
Heap-based buffer overflow in the JPEG2000 image tile decoder in OpenJPEG before 1.5.2 allows remote attackers to cause a denial of service
HighCVSS 8.8No exploitEPSS 1%uclouvain · openjpegApr 10, 2018
- CVE-2016-716333Monitor
Integer overflow in the opj_pi_create_decode function in pi.c in OpenJPEG allows remote attackers to execute arbitrary code via a crafted JP
HighCVSS 7.8No exploitEPSS 7%uclouvain · openjpegSep 21, 2016
- CVE-2016-957333Monitor
An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2k_to_image tool.
HighCVSS 8.1No exploitEPSS 2%uclouvain · openjpegAug 1, 2018
- CVE-2013-604532Monitor
Multiple heap-based buffer overflows in OpenJPEG 1.3 and earlier might allow remote attackers to execute arbitrary code via unspecified vect
HighCVSS 7.5No exploitEPSS 5%uclouvain · openjpegDec 12, 2013