Read the docs

Kakadu Software

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Kakadu Software records in CISA KEV

No Kakadu Software vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Kakadu Sdk 3 records MEDIUM Kakadu Software 1 record MEDIUM

Records

4 records

TI-2019-03600 CVE-2019-5144 · GHSA-h7qq-9c39-h27p

Integer underflow in Kakadu Software

Priority MEDIUM 43

An exploitable heap underflow vulnerability exists in the derive_taps_and_gains function in kdu_v7ar.dll of Kakadu Software SDK 7.10.2.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02435 Published 2019-12-12 No fix listed CWE-191
TI-2017-02033 CVE-2017-2812 · GHSA-988p-2vg3-2vh4

Out-of-bounds write in Kakadu SDK

Priority MEDIUM 41

A code execution vulnerability exists in the kdu_buffered_expand function of the Kakadu SDK 7.9.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01421 Published 2018-04-24 No fix listed CWE-787
TI-2017-02032 CVE-2017-2811 · GHSA-qj5p-vmvr-x7qq

Out-of-bounds write in Kakadu SDK

Priority MEDIUM 41

A code execution vulnerability exists in the Kakadu SDK 7.9's parsing of compressed JPEG 2000 images.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0146 Published 2018-04-24 No fix listed CWE-787
TI-2023-06013 CVE-2023-6562

Path traversal in Kakadu SDK

Priority LOW 34

JPX Fragment List (flst) box vulnerability in Kakadu 7.9 allows an attacker to exfiltrate local and remote files reachable by a server if the server allows the attacker to upload a specially-crafted the image that is dis…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00722 Published 2023-12-20 Fixed in 8.4 CWE-22
Open these records in search →