Skip to content

CVE-2012-3535

Heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a...

6.8 MediumFix available

CVE-2012-3535 is a medium vulnerability (CVSS 6.8) in Uclouvain Openjpeg, published September 5, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.15%, the 93rd percentile. Fixed in openjpeg 1.3+dfsg-4+squeeze1.

Heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted JPEG2000 file.

Exploit likelihood

6.15%Down 0.5 points since Feb 4, 2022

What each source reports

NVD Score used 6.8

Heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted JPEG2000 file.

Record: CVE-2012-3535
CVSS 2.0: 6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness: CWE-119
Updated: 2026-11-02

CVE List No score

Heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted JPEG2000 file.

Record: CVE-2012-3535
Updated: 2026-11-02

EUVDEUVD-2012-3486 No score

Heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted JPEG2000 file.

Record: EUVD-2012-3486
Updated: 2026-11-03

GitHub AdvisoriesGHSA-cfh8-rvcx-v326 No score

Heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a...

Heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted JPEG2000 file.

Record: GHSA-cfh8-rvcx-v326
Weakness: CWE-119
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10227-1 No score

libopenjpeg1-1.5.2-4.7 on GA media

These are all security issues fixed in the libopenjpeg1-1.5.2-4.7 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10227-1
Updated: 2026-11-02

Affected products

uclouvain openjpeg

Affected packages

Affected packages
Package	Affected	Fixed
`openjpeg` Debian:6.0	before 1.3+dfsg-4+squeeze1, plus listed versions 1.3+dfsg-4	1.3+dfsg-4+squeeze1
`openjpeg` Red Hat:enterprise_linux:6::client	before 0:1.3-9.el6_3	0:1.3-9.el6_3
`openjpeg-debuginfo` Red Hat:enterprise_linux:6::client	before 0:1.3-9.el6_3	0:1.3-9.el6_3
`openjpeg-libs` Red Hat:enterprise_linux:6::client	before 0:1.3-9.el6_3	0:1.3-9.el6_3
`openjpeg-devel` Red Hat:enterprise_linux:6::client	before 0:1.3-9.el6_3	0:1.3-9.el6_3
`openjpeg` Red Hat:enterprise_linux:6::computenode	before 0:1.3-9.el6_3	0:1.3-9.el6_3
`openjpeg-debuginfo` Red Hat:enterprise_linux:6::computenode	before 0:1.3-9.el6_3	0:1.3-9.el6_3
`openjpeg-libs` Red Hat:enterprise_linux:6::computenode	before 0:1.3-9.el6_3	0:1.3-9.el6_3
`openjpeg-devel` Red Hat:enterprise_linux:6::computenode	before 0:1.3-9.el6_3	0:1.3-9.el6_3
`openjpeg` Red Hat:enterprise_linux:6::server	before 0:1.3-9.el6_3	0:1.3-9.el6_3

Show 7 moreShow less

Affected packages
Package	Affected	Fixed
`openjpeg-debuginfo` Red Hat:enterprise_linux:6::server	before 0:1.3-9.el6_3	0:1.3-9.el6_3
`openjpeg-libs` Red Hat:enterprise_linux:6::server	before 0:1.3-9.el6_3	0:1.3-9.el6_3
`openjpeg-devel` Red Hat:enterprise_linux:6::server	before 0:1.3-9.el6_3	0:1.3-9.el6_3
`openjpeg` Red Hat:enterprise_linux:6::workstation	before 0:1.3-9.el6_3	0:1.3-9.el6_3
`openjpeg-debuginfo` Red Hat:enterprise_linux:6::workstation	before 0:1.3-9.el6_3	0:1.3-9.el6_3
`openjpeg-libs` Red Hat:enterprise_linux:6::workstation	before 0:1.3-9.el6_3	0:1.3-9.el6_3
`openjpeg-devel` Red Hat:enterprise_linux:6::workstation	before 0:1.3-9.el6_3	0:1.3-9.el6_3

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 25 moreShow less