Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Kakadu Software Clear all filters
TI-2023-06013 CVE-2023-6562

Path traversal in Kakadu SDK

Priority LOW 34

JPX Fragment List (flst) box vulnerability in Kakadu 7.9 allows an attacker to exfiltrate local and remote files reachable by a server if the server allows the attacker to upload a specially-crafted the image that is dis…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00722 Published 2023-12-20 Fixed in 8.4 CWE-22
TI-2019-03600 CVE-2019-5144 · GHSA-h7qq-9c39-h27p

Integer underflow in Kakadu Software

Priority MEDIUM 43

An exploitable heap underflow vulnerability exists in the derive_taps_and_gains function in kdu_v7ar.dll of Kakadu Software SDK 7.10.2.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02435 Published 2019-12-12 No fix listed CWE-191
TI-2017-02033 CVE-2017-2812 · GHSA-988p-2vg3-2vh4

Out-of-bounds write in Kakadu SDK

Priority MEDIUM 41

A code execution vulnerability exists in the kdu_buffered_expand function of the Kakadu SDK 7.9.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01421 Published 2018-04-24 No fix listed CWE-787
TI-2017-02032 CVE-2017-2811 · GHSA-qj5p-vmvr-x7qq

Out-of-bounds write in Kakadu SDK

Priority MEDIUM 41

A code execution vulnerability exists in the Kakadu SDK 7.9's parsing of compressed JPEG 2000 images.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0146 Published 2018-04-24 No fix listed CWE-787