Сообщество свободного программного обеспечения OpenJPEG

Name: Сообщество свободного программного обеспечения OpenJPEG
Brand: Сообщество свободного программного обеспечения

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

2critical10high13medium0low

updated 2026-10-27

vulnerabilities (31)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-27824US	medium5.5	1.61% (76th)	Exploit	no fix	2021-05-13	≤ 2.4.0
CVE-2025-54874US	critical9.8	0.63% (50th)	Exploit	no fix	2025-08-05	≤ 2.5.3
CVE-2020-6851US	high7.5	5.29% (93rd)	—	no fix	2020-01-13	≤ 2.3.1
CVE-2017-17480US	critical9.8	5.13% (92nd)	—	no fix	2017-12-08	≤ 2.3.0
CVE-2020-8112US	high8.8	3.62% (89th)	—	no fix	2020-01-28	2 versions
CVE-2018-14423US	high7.5	3.22% (88th)	—	no fix	2018-07-19	≤ 2.3.0
CVE-2016-9112US	high7.5	3.17% (88th)	—	no fix	2016-10-29	≤ 2.1.2
CVE-2019-12973US	medium5.5	2.60% (85th)	—	no fix	2019-06-26	≤ 2.3.1
CVE-2020-15389US	medium6.5	2.60% (85th)	—	no fix	2020-06-29	≤ 2.3.1
CVE-2018-20847US	high8.8	2.34% (84th)	—	no fix	2019-06-26	≤ 2.3.0
CVE-2018-5785US	medium6.5	2.33% (83rd)	—	no fix	2018-01-19	≤ 2.3.0
CVE-2020-27814US	high7.8	2.10% (82nd)	—	no fix	2021-01-26	2 versions
CVE-2018-21010US	high8.8	2.09% (82nd)	—	no fix	2019-09-05	≤ 2.3.1
CVE-2018-18088US	medium6.5	1.96% (80th)	—	no fix	2018-10-09	≤ 2.3.0
CVE-2018-5727US	medium6.5	1.82% (79th)	—	no fix	2018-01-16	≤ 2.3.0
CVE-2020-27843US	medium5.5	1.77% (78th)	—	no fix	2021-01-05	≤ 2.4.0
CVE-2018-6616US	medium5.5	1.66% (77th)	—	no fix	2018-02-04	≤ 2.3.0
CVE-2021-29338US	medium5.5	1.56% (75th)	—	no fix	2021-04-14	≤ 2.5.0
CVE-2021-3575US	high7.8	1.55% (75th)	—	no fix	2022-03-04	≤ 2.4.0
CVE-2020-27845US	medium5.5	1.52% (74th)	—	no fix	2021-01-05	≤ 2.4.0
CVE-2020-27842US	medium5.5	1.52% (74th)	—	no fix	2021-01-05	≤ 2.4.0
CVE-2020-27841US	medium5.5	1.45% (73rd)	—	no fix	2021-01-05	≤ 2.4.0
CVE-2020-27844US	high7.8	1.39% (72nd)	—	no fix	2021-01-05	≤ 2.4.0
CVE-2020-27823US	high7.8	1.11% (66th)	—	no fix	2021-05-13	≤ 2.4.0
CVE-2022-1122US	medium5.5	1.10% (66th)	—	no fix	2022-03-29	≤ 2.5.0
CVE-2023-39327US	—	0.56% (46th)	—	no fix	2024-07-13	≤ 2.5.3
CVE-2024-56826US	—	0.31% (24th)	—	no fix	2025-01-09	≤ 2.5.2
CVE-2025-50952US	—	0.27% (20th)	—	no fix	2025-08-07	≤ 2.5.0
CVE-2024-56827US	—	0.26% (18th)	—	no fix	2025-01-09	≤ 2.5.2
CVE-2023-39328US	—	0.24% (15th)	—	no fix	2024-07-09	≤ 2.5.0
CVE-2026-6192US	—	0.11% (1st)	—	no fix	2026-04-13	≤ 2.5.4

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write9 CVEs
CWE-122Heap-based Buffer Overflow6 CVEs
CWE-190Integer Overflow or Wraparound5 CVEs
CWE-20Improper Input Validation5 CVEs
CWE-125Out-of-bounds Read4 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2 CVEs
CWE-369Divide By Zero2 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)31 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan