Skip to main content

Openjpeg CVE-2026-6192

| EUVDEUVD-2026-22030 LOW
Integer Overflow or Wraparound (CWE-190)
2026-04-13 VulDB GHSA-6jfp-5ggc-pgmx
1.9
CVSS 4.0 · NVD

Severity by source

NVD PRIMARY
1.9 LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
SUSE
1.7 LOW
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Red Hat
3.3 LOW
qualitative

Primary rating from NVD.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

10
Severity Changed
Apr 29, 2026 - 01:12 NVD
MEDIUM LOW
CVSS changed
Apr 29, 2026 - 01:12 NVD
4.8 (MEDIUM) 1.9 (LOW)
PoC Detected
Apr 29, 2026 - 01:00 vuln.today
Public exploit code
Analysis Generated
Apr 15, 2026 - 12:48 vuln.today
Severity Changed
Apr 13, 2026 - 17:22 NVD
LOW MEDIUM
CVSS changed
Apr 13, 2026 - 17:22 NVD
3.3 (LOW) 4.8 (MEDIUM)
EUVD ID Assigned
Apr 13, 2026 - 17:15 euvd
EUVD-2026-22030
Analysis Generated
Apr 13, 2026 - 17:15 vuln.today
Patch released
Apr 13, 2026 - 17:15 nvd
Patch available
CVE Published
Apr 13, 2026 - 16:45 nvd
LOW 1.9

DescriptionCVE.org

A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opj_pi_initialise_encode in the library src/lib/openjp2/pi.c. The manipulation leads to integer overflow. The attack must be carried out locally. The exploit is publicly available and might be used. The identifier of the patch is 839936aa33eb8899bbbd80fda02796bb65068951. It is suggested to install a patch to address this issue.

AnalysisAI

Integer overflow in OpenJPEG's opj_pi_initialise_encode function (versions 2.5.0-2.5.4) allows authenticated local attackers to trigger availability impact via crafted input to the pi.c library module. The vulnerability has a publicly available proof-of-concept and carries an EPSS score of 0.01% (2nd percentile), reflecting minimal real-world exploitation likelihood despite the presence of exploit code. Patch commit 839936aa33eb8899bbbd80fda02796bb65068951 is available from the vendor.

Technical ContextAI

OpenJPEG is a widely-used JPEG 2000 image codec library implemented in C. The vulnerability exists in the opj_pi_initialise_encode function within src/lib/openjp2/pi.c, which handles packet iterator initialization during the JPEG 2000 encoding process. The root cause is a CWE-190 integer overflow that occurs during arithmetic operations on dimensions or tile parameters, likely when computing buffer sizes or iteration limits. Integer overflows in C image codecs can cascade into heap corruption, out-of-bounds memory access, or allocation failures if the overflowed value is subsequently used in memory operations. The CPE cpe:2.3:a:uclouvain:openjpeg:*:*:*:*:*:*:*:* covers all OpenJPEG products; the affected major versions are 2.5.0 through 2.5.4.

RemediationAI

Upgrade OpenJPEG to a patched version; the vendor-released fix corresponds to commit 839936aa33eb8899bbbd80fda02796bb65068951, available via GitHub pull request https://github.com/uclouvain/openjpeg/pull/1628. Users should check the OpenJPEG releases page for the next stable version incorporating this commit (likely 2.5.5 or later, though exact version numbering not confirmed in provided data). In the interim, if immediate patching is not feasible, restrict local access to systems running OpenJPEG and disable JPEG 2000 encoding features if they are not essential. Verify that any downstream applications (document viewers, image editors, codec libraries) using OpenJPEG as a dependency have been updated; refer to the upstream advisory at https://github.com/uclouvain/openjpeg/issues/1619 for detailed technical context.

CVE-2013-4290 CRITICAL POC
10.0 Apr 18

Stack-based buffer overflow in OpenJPEG before 1.5.2 allows remote attackers to have unspecified impact via unknown vect

CVE-2017-14164 HIGH POC
8.8 Sep 06

A size-validation issue was discovered in opj_j2k_write_sot in lib/openjp2/j2k.c in OpenJPEG 2.2.0. Rated high severity

CVE-2020-8112 HIGH POC
8.8 Jan 28

opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in th

CVE-2016-7445 HIGH POC
7.5 Oct 03

convert.c in OpenJPEG before 2.1.2 allows remote attackers to cause a denial of service (NULL pointer dereference and ap

CVE-2016-7163 HIGH POC
7.8 Sep 21

Integer overflow in the opj_pi_create_decode function in pi.c in OpenJPEG allows remote attackers to execute arbitrary c

CVE-2016-8332 HIGH POC
7.5 Oct 28

A buffer overflow in OpenJPEG 2.1.1 causes arbitrary code execution when parsing a crafted image. Rated high severity (C

CVE-2012-3535 MEDIUM POC
6.8 Sep 05

Heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service (applicati

CVE-2016-10504 MEDIUM POC
6.5 Aug 30

Heap-based buffer overflow vulnerability in the opj_mqc_byteout function in mqc.c in OpenJPEG before 2.2.0 allows remote

CVE-2016-9112 HIGH POC
7.5 Oct 29

Floating Point Exception (aka FPE or divide by zero) in opj_pi_next_cprl function in openjp2/pi.c:523 in OpenJPEG 2.1.2.

CVE-2016-9114 HIGH POC
7.5 Oct 30

There is a NULL Pointer Access in function imagetopnm of convert.c:1943(jp2) of OpenJPEG 2.1.2. Rated high severity (CVS

CVE-2016-9113 HIGH POC
7.5 Oct 30

There is a NULL pointer dereference in function imagetobmp of convertbmp.c:980 of OpenJPEG 2.1.2. Rated high severity (C

CVE-2020-6851 HIGH POC
7.5 Jan 13

OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack

Vendor StatusVendor

SUSE

Severity: Low
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Fixed
SUSE Linux Enterprise High Performance Computing 15 SP7 Fixed
SUSE Linux Enterprise Module for Basesystem 15 SP7 Fixed
SUSE Linux Enterprise Module for Package Hub 15 SP7 Fixed
SUSE Linux Enterprise Server 15 SP7 Fixed

Share

CVE-2026-6192 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy