AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2014-0158

HIGH · CVSS 8.8 EPSS 1.83%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-04-10 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 8.8. It may be remotely exploitable. It may lead to a denial-of-service condition.

CVE
CVE-2014-0158
Severity
HIGH
CVSS
8.8
EPSS
1.83%

Original NVD Description

Heap-based buffer overflow in the JPEG2000 image tile decoder in OpenJPEG before 1.5.2 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file because of incorrect j2k_decode, j2k_read_eoc, and tcd_decode_tile interaction, a related issue to CVE-2013-6045. NOTE: this is not a duplicate of CVE-2013-1447, because the scope of CVE-2013-1447 was specifically defined in http://openwall.com/lists/oss-security/2013/12/04/6 as only "null pointer dereferences, division by zero, and anything that would just fit as DoS."

Related CVEs

Other vulnerabilities affecting the same vendor(s)