VYPR

openjp2

by OpenJPEG

CVEs (1)

  • CVE-2026-111151MedOct 15, 2026
    risk 0.33cvss 6.1epss 0.00

    OpenJPH through 0.32.0 contains a heap out-of-bounds write vulnerability in the HTJ2K cleanup-pass decoder that allows attackers to corrupt memory via one-row codeblocks. Attackers can supply a crafted .j2c or .jph codestream with small precinct sizes, causing the decoder to…