OpenJPEG 2.4.0 through 2.5.4 assigned CVE-2026-107080 for heap overflow
MITRE describes an out-of-bounds read and write that can cause denial of service; the proposed fix is still unmerged.
48
Vendor
OpenJPEG
- Mentions · 7d1
- Mentions · 30d3
- All mentions3
- First seenOct 5, 2026
- Last mentioned1d ago
Timeline
3 articles · newest firstRe: OpenJPEG: heap-buffer-overflow write fixed on master since Feb 2026, still present in every release (2.5.3, 2.5.4)
OpenJPEG's heap-buffer-overflow write, fixed on master in February 2026, remains in every release while the project is unmaintained.
55
openjpeg 2.4.0 through 2.5.4 and git master: heap buffer overflow in opj_dwt_encode_and_deinterleave_v() (reversible 5/3 forward DWT, encoder)
OpenJPEG 2.4.0 through 2.5.4 has an encoder-side heap overflow in its reversible 5/3 wavelet transform.
52
Related CVEs
by mentionsAppears with
- OpenJPEGproduct · 2
- Red Eagle Techorganization · 1
- UCLouvainorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.