Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Kakadu Software Component: Kakadu Sdk Clear all filters
TI-2023-06013 CVE-2023-6562

Path traversal in Kakadu SDK

Priority LOW 34

JPX Fragment List (flst) box vulnerability in Kakadu 7.9 allows an attacker to exfiltrate local and remote files reachable by a server if the server allows the attacker to upload a specially-crafted the image that is dis…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00722 Published 2023-12-20 Fixed in 8.4 CWE-22
TI-2017-02033 CVE-2017-2812 · GHSA-988p-2vg3-2vh4

Out-of-bounds write in Kakadu SDK

Priority MEDIUM 41

A code execution vulnerability exists in the kdu_buffered_expand function of the Kakadu SDK 7.9.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01421 Published 2018-04-24 No fix listed CWE-787
TI-2017-02032 CVE-2017-2811 · GHSA-qj5p-vmvr-x7qq

Out-of-bounds write in Kakadu SDK

Priority MEDIUM 41

A code execution vulnerability exists in the Kakadu SDK 7.9's parsing of compressed JPEG 2000 images.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0146 Published 2018-04-24 No fix listed CWE-787