CVE-2017-2811: A code execution vulnerability exists in the Kakadu SDK 7.9's parsing of compressed JPEG 2000 images.

Security readout for executives and security teams

Kakadu SDK 7.9 has a flaw in how it reads compressed JPEG 2000 images. If an affected application processes a malicious image file, memory corruption can occur and may allow code execution. This matters most where the SDK handles files from customers, partners, websites, email, or automated media pipelines. Exposure is likely limited to software or services embedding Kakadu SDK 7.9 on OS X or Linux and processing JPEG 2000 files, especially untrusted uploads or inbound media. Treat as high priority if Kakadu SDK 7.9 processes external media. The business risk is code execution through a file-parsing path, but urgency depends on whether affected systems accept untrusted JPEG 2000 content. Mitigation focus: Identify applications and services using Kakadu SDK 7.9 on OS X or Linux.; Check Kakadu Software and Talos guidance for confirmed fixed or supported versions.; Upgrade or replace affected SDK builds when vendor-confirmed updates are available..

Prepared

May 23, 2026, 08:33 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.