[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2017-14039":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T08:55:32.481Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":22,"downstream":23,"duplicates":40,"related":41,"reserved_at":9,"published_at":46,"modified_at":47,"state":48,"summary":49,"references_raw":58,"kevs":93,"epss":94,"epss_history":97,"metrics":360,"affected":371},"CVE-2017-14039","A heap-based buffer overflow was discovered in the opj_t2_encode_packet function in lib/openjp2/t2.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly unspecified other impact.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","weakness","Draft","Base","High",[],[],[],[],[24,26,28,30,32,34,36,38],{"_key":25},"ALPINE-CVE-2017-14039",{"_key":27},"SUSE-SU-2017:2649-1",{"_key":29},"OPENSUSE-SU-2017:2685-1",{"_key":31},"OPENSUSE-SU-2017:2686-1",{"_key":33},"DSA-4013-1",{"_key":35},"MGASA-2017-0481",{"_key":37},"UBUNTU-CVE-2017-14039",{"_key":39},"DEBIAN-CVE-2017-14039",[],[42,43,44,45],{"_key":27},{"_key":29},{"_key":31},{"_key":35},"2017-08-30T22:00:00.000Z","2024-08-05T19:13:41.867Z","Modified",{"cisa_kev":50,"cisa_ransomware":50,"cisa_vendor":9,"epss_severity":51,"epss_score":52,"severity":53,"severity_score":54,"severity_version":55,"severity_source":56,"severity_vector":57,"severity_status":48},false,"low",0.00674,"high",8.8,"v3.1","nvd","CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",[59,67,74,79,85,89],{"url":60,"sources":61,"tags":63},"https://security.gentoo.org/glsa/201710-26",[62,56],"cve.org",[64,65,66],"Vendor Advisory","X Refsource GENTOO","Third Party Advisory",{"url":68,"sources":69,"tags":70},"https://github.com/uclouvain/openjpeg/issues/992",[62,56],[71,72,73,66],"X Refsource MISC","Issue Tracking","Patch",{"url":75,"sources":76,"tags":77},"http://www.debian.org/security/2017/dsa-4013",[62,56],[64,78,66],"X Refsource DEBIAN",{"url":80,"sources":81,"tags":82},"http://www.securityfocus.com/bid/100550",[62,56],[83,84,66],"VDB Entry","X Refsource BID",{"url":86,"sources":87,"tags":88},"https://github.com/uclouvain/openjpeg/commit/c535531f03369623b9b833ef41952c62257b507e",[62,56],[71,72,73,66],{"url":90,"sources":91,"tags":92},"https://blogs.gentoo.org/ago/2017/08/28/openjpeg-heap-based-buffer-overflow-in-opj_t2_encode_packet-t2-c/",[62,56],[71,73,66,83],[],{"date":95,"score":52,"percentile":96},"2026-06-04",0.71839,[98,102,105,108,111,114,117,120,123,126,129,132,135,138,141,144,147,150,153,156,159,162,165,167,171,174,177,180,183,186,189,192,195,198,201,204,207,210,213,216,219,222,225,228,231,234,237,240,243,245,247,250,253,256,259,262,265,267,269,272,275,277,279,282,285,288,291,294,296,299,302,305,308,311,314,317,320,323,325,328,331,334,337,340,342,345,348,351,354,357],{"date":99,"score":100,"percentile":101},"2025-11-04",0.00644,0.69833,{"date":103,"score":100,"percentile":104},"2025-11-05",0.69819,{"date":106,"score":100,"percentile":107},"2025-11-06",0.69817,{"date":109,"score":100,"percentile":110},"2025-11-07",0.69829,{"date":112,"score":100,"percentile":113},"2025-11-08",0.6983,{"date":115,"score":100,"percentile":116},"2025-11-09",0.69821,{"date":118,"score":100,"percentile":119},"2025-11-10",0.6981,{"date":121,"score":100,"percentile":122},"2025-11-11",0.6982,{"date":124,"score":100,"percentile":125},"2025-11-12",0.69843,{"date":127,"score":100,"percentile":128},"2025-11-13",0.6985,{"date":130,"score":100,"percentile":131},"2025-11-14",0.69857,{"date":133,"score":100,"percentile":134},"2025-11-15",0.69855,{"date":136,"score":100,"percentile":137},"2025-11-16",0.69852,{"date":139,"score":100,"percentile":140},"2025-11-17",0.69849,{"date":142,"score":100,"percentile":143},"2025-11-18",0.68267,{"date":145,"score":100,"percentile":146},"2025-11-19",0.68275,{"date":148,"score":100,"percentile":149},"2025-11-20",0.68269,{"date":151,"score":100,"percentile":152},"2025-11-21",0.69865,{"date":154,"score":100,"percentile":155},"2025-11-22",0.69858,{"date":157,"score":100,"percentile":158},"2025-11-23",0.69844,{"date":160,"score":100,"percentile":161},"2025-11-24",0.69836,{"date":163,"score":100,"percentile":164},"2025-11-25",0.69837,{"date":166,"score":100,"percentile":125},"2025-11-26",{"date":168,"score":169,"percentile":170},"2025-11-27",0.0061,0.68921,{"date":172,"score":169,"percentile":173},"2025-11-28",0.68909,{"date":175,"score":169,"percentile":176},"2025-11-29",0.68897,{"date":178,"score":169,"percentile":179},"2025-11-30",0.68892,{"date":181,"score":169,"percentile":182},"2025-12-01",0.69043,{"date":184,"score":169,"percentile":185},"2025-12-02",0.69051,{"date":187,"score":169,"percentile":188},"2025-12-03",0.69046,{"date":190,"score":169,"percentile":191},"2025-12-04",0.68887,{"date":193,"score":169,"percentile":194},"2025-12-05",0.68903,{"date":196,"score":169,"percentile":197},"2025-12-06",0.68907,{"date":199,"score":169,"percentile":200},"2025-12-07",0.68901,{"date":202,"score":169,"percentile":203},"2025-12-08",0.68906,{"date":205,"score":169,"percentile":206},"2025-12-09",0.68936,{"date":208,"score":100,"percentile":209},"2025-12-10",0.69907,{"date":211,"score":100,"percentile":212},"2025-12-11",0.69929,{"date":214,"score":100,"percentile":215},"2025-12-12",0.69955,{"date":217,"score":100,"percentile":218},"2025-12-13",0.69958,{"date":220,"score":100,"percentile":221},"2025-12-14",0.6996,{"date":223,"score":100,"percentile":224},"2025-12-15",0.69956,{"date":226,"score":100,"percentile":227},"2025-12-16",0.69963,{"date":229,"score":100,"percentile":230},"2025-12-17",0.69979,{"date":232,"score":100,"percentile":233},"2025-12-18",0.70007,{"date":235,"score":100,"percentile":236},"2025-12-19",0.70024,{"date":238,"score":100,"percentile":239},"2025-12-20",0.70021,{"date":241,"score":100,"percentile":242},"2025-12-21",0.70011,{"date":244,"score":100,"percentile":233},"2025-12-22",{"date":246,"score":100,"percentile":233},"2025-12-23",{"date":248,"score":100,"percentile":249},"2025-12-24",0.70016,{"date":251,"score":100,"percentile":252},"2025-12-25",0.70041,{"date":254,"score":100,"percentile":255},"2025-12-26",0.7004,{"date":257,"score":100,"percentile":258},"2025-12-27",0.70074,{"date":260,"score":100,"percentile":261},"2025-12-28",0.70013,{"date":263,"score":100,"percentile":264},"2025-12-29",0.70009,{"date":266,"score":100,"percentile":239},"2025-12-30",{"date":268,"score":100,"percentile":252},"2025-12-31",{"date":270,"score":100,"percentile":271},"2026-01-01",0.70196,{"date":273,"score":100,"percentile":274},"2026-01-02",0.7019,{"date":276,"score":100,"percentile":274},"2026-01-03",{"date":278,"score":100,"percentile":255},"2026-01-04",{"date":280,"score":100,"percentile":281},"2026-01-05",0.70031,{"date":283,"score":100,"percentile":284},"2026-01-06",0.70038,{"date":286,"score":100,"percentile":287},"2026-01-07",0.70053,{"date":289,"score":100,"percentile":290},"2026-01-08",0.70068,{"date":292,"score":100,"percentile":293},"2026-01-09",0.70073,{"date":295,"score":100,"percentile":293},"2026-01-10",{"date":297,"score":100,"percentile":298},"2026-01-11",0.70067,{"date":300,"score":100,"percentile":301},"2026-01-12",0.70062,{"date":303,"score":100,"percentile":304},"2026-01-13",0.70059,{"date":306,"score":100,"percentile":307},"2026-01-14",0.70088,{"date":309,"score":100,"percentile":310},"2026-01-15",0.70094,{"date":312,"score":100,"percentile":313},"2026-01-16",0.70112,{"date":315,"score":100,"percentile":316},"2026-01-17",0.70105,{"date":318,"score":100,"percentile":319},"2026-01-18",0.70085,{"date":321,"score":100,"percentile":322},"2026-01-19",0.70076,{"date":324,"score":100,"percentile":319},"2026-01-20",{"date":326,"score":100,"percentile":327},"2026-01-21",0.70089,{"date":329,"score":100,"percentile":330},"2026-01-22",0.70101,{"date":332,"score":100,"percentile":333},"2026-01-23",0.70133,{"date":335,"score":100,"percentile":336},"2026-01-24",0.70138,{"date":338,"score":100,"percentile":339},"2026-01-25",0.70108,{"date":341,"score":100,"percentile":316},"2026-01-26",{"date":343,"score":100,"percentile":344},"2026-01-27",0.70107,{"date":346,"score":100,"percentile":347},"2026-01-28",0.70121,{"date":349,"score":100,"percentile":350},"2026-01-29",0.7012,{"date":352,"score":100,"percentile":353},"2026-01-30",0.70129,{"date":355,"score":100,"percentile":356},"2026-01-31",0.70134,{"date":358,"score":100,"percentile":359},"2026-02-01",0.70267,[361],{"source":56,"cvss_v2_0":362,"cvss_v3_0":9,"cvss_v3_1":367,"cvss_v4_0":9},{"baseScore":363,"baseSeverity":9,"vectorString":364,"impactScore":365,"exploitabilityScore":366},6.8,"AV:N/AC:M/Au:N/C:P/I:P/A:P",6.4,8.6,{"baseScore":54,"baseSeverity":368,"vectorString":57,"impactScore":369,"exploitabilityScore":370},"HIGH",9.8,7.2,[372,383],{"ecosystem":9,"name":373,"vendor":374,"product":375,"cpe_part":376,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":377},"debian linux","debian","debian_linux","o",[378,381],{"version":379,"is_range":50,"range_type":380,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"8.0","cpe",{"version":382,"is_range":50,"range_type":380,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9.0",{"ecosystem":9,"name":384,"vendor":385,"product":384,"cpe_part":386,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":387},"openjpeg","uclouvain","a",[388],{"version":389,"is_range":390,"range_type":380,"version_start":9,"version_start_type":9,"version_end":391,"version_end_type":392,"fixed_in":9},"lt2.3.0",true,"2.3.0","excluding"]