All pull requests

Pull requests

• Patch OOM in opj_j2k_update_image_data()

  #1679·LearnPRG-py opened Oct 19, 2026·

  ·
  1

• Fix macOS CLI library lookup after relocation

  #1677·jdotc1 opened Oct 17, 2026·

  ·
  1

  1

• Photoshop-compatible XMP/EXIF support

  #1676·mircomir opened Oct 9, 2026Contributor·

  ·

• add image resolution boxes

  #1675·mircomir opened Oct 7, 2026Contributor·

  ·

• opj_dwt: do not transform a resolution level with no rows

  #1674·agenthandler opened Oct 5, 2026·

  ·
  1

  1

• opj_decompress: add -keep-colorspace and planar subsampled RAW/YUV output

  #1672·dickymetz opened Oct 4, 2026·

  ·

• openjpip: reject invalid component ranges in parse_comps()

  #1670·iliasabk opened Sep 26, 2026·

  ·
  1

• openjpip: bound query parser field copies to the destination buffers (#1660)

  #1668·1820893135-pixel opened Sep 23, 2026·

  ·
  1

• color: gate ICC YCbCr formatters on bit depth to fix heap-buffer-overflow

  #1667·AetherAI3 opened Sep 6, 2026·

  ·
  1

• Reject oversized -OutFor values in opj_decompress

  #1664·Alb3e3 opened Aug 20, 2026·

  ·
  1

• Reject oversized -OutFor values in opj_compress

  #1665·Alb3e3 opened Aug 20, 2026·

  ·
  1

• openjpip: bound truncated VBAS parsing

  #1663·Alb3e3 opened Aug 20, 2026·

  ·
  1

• tcd: guard against cw*ch integer overflow in opj_tcd_init_tile

  #1662·Alb3e3 opened Aug 10, 2026·

  ·

• t2/tcd: fix precinct OOB access and NULL tag-tree dereference

  #1661·Alb3e3 opened Aug 10, 2026·

  ·
  1

• Fix data loss / assert when encoding tiles with empty resolution levels

  #1657·nico opened Jul 12, 2026Contributor·

  ·
  1

  2

• openjpip: bound query parser field copies

  #1656·Alb3e3 opened Jul 9, 2026·

  ·
  2

  1

• opj_compress: fix stack buffer overflow in -OutFor option parsing (#1642)

  #1653·steps-re opened Jul 7, 2026·

  ·
  1

• opj_color: fix heap buffer overflow in color_apply_icc_profile with 8…

  #1651·0x30c4 opened Jun 30, 2026·

  ·

• opj_tcd: fix heap buffer overflow encoding 16-bit images with TERMALL…

  #1649·0x30c4 opened Jun 29, 2026·

  ·

• ci: add permissions and pin action SHAs (4 workflows)

  #1646·Alb3e3 opened Jun 11, 2026·

  ·
  3

• fuzzers: add opj_compress_fuzzer for J2K/JP2 encode path

  #1645·XananasX7 opened Jun 11, 2026·

  ·
  2

• opj_tcd: fix out-of-bounds read in opj_tcd_get_decoded_tile_size() when the reduce factor equals numresolutions (#1631)

  #1640·Alearner12 opened May 30, 2026·

  ·
  1

• fuzz: add fuzz_jp2_metadata for JP2 container header and box parsing

  #1639·XananasX7 opened May 29, 2026·

  ·

• fix: reject zero-progress packet headers for CVE-2023-39327

  #1624·jeffspahr opened Mar 1, 2026·

  ·
  6

• Address CVE-2023-39327, stop excessive loop errors

  #1616·xcawolfe-amzn opened Dec 29, 2025·

  ·
  1

  5