CVE-2017-14151: An off-by-one error was discovered in opj_tcd_code_block_enc_allocate_data in lib/openjp2/tcd.c in OpenJPEG...

Security readout for executives and security teams

CVE-2017-14151 affects OpenJPEG 2.2.0, a JPEG 2000 image-processing library. A malformed image can trigger a heap buffer overflow. The documented impact is remote denial of service, with possible remote code execution. Business urgency is highest where OpenJPEG processes files from users, email, web uploads, or automated document pipelines. Exposure is likely in systems using OpenJPEG 2.2.0 or downstream packages to parse, convert, thumbnail, or encode untrusted JPEG 2000 files. The bundle does not identify specific applications, CPEs, or all affected versions beyond OpenJPEG 2.2.0. Treat as high priority for internet-facing or user-content processing environments. The likely business impact is service disruption, with possible compromise risk. Where OpenJPEG only handles trusted internal files, urgency is lower but patching should remain part of normal vulnerability remediation. Mitigation focus: Check vendor advisories for fixed OpenJPEG packages in your distribution.; Upgrade OpenJPEG from affected 2.2.0 builds to a vendor-supported fixed release.; Prioritize systems that process untrusted JPEG 2000 uploads or attachments..

Prepared

Jun 12, 2026, 21:19 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.