CVE-2017-2812

7.8 highEPSS 1.4%

High (7.8) in kakadusoftware kakadu sdk. EPSS 1.4% chance of exploitation in the next 30 days.

A code execution vulnerability exists in the kdu_buffered_expand function of the Kakadu SDK 7.9. A specially crafted JPEG 2000 file can be read by the program and can lead to an out of bounds write causing an exploitable condition to arise.

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2018-04-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

kakadusoftware:kakadu_sdk

References

http://www.securityfocus.com/bid/100140
https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0309
http://www.securityfocus.com/bid/100140
https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0309

Check your stack JSON