https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T06:40:53.965691+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2020-15389 CVE-2020-15389 2026-09-30T06:40:54.421841+00:00

jp2/opj_decompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid and invalid files in a directory operated on by the decompressor. Triggering a double-free may also be possible. This is related to calling opj_image_destroy twice.

 https://vulnerability.circl.lu/vuln/usn-4497-1 USN-4497-1 — OpenJPEG vulnerabilities 2026-09-30T06:40:54.421942+00:00

Affected: Ubuntu:16.04:LTS: openjpeg2

It was discovered that OpenJPEG incorrectly handled certain image files. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2016-9112)

It was discovered that OpenJPEG did not properly handle certain input. If OpenJPEG were supplied with specially crafted input, it could be made to crash or potentially execute arbitrary code. (CVE-2018-20847, CVE-2018-21010, CVE-2020-6851, CVE-2020-8112, CVE-2020-15389)

It was discovered that OpenJPEG incorrectly handled certain BMP files. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2019-12973)