Is CVE-2014-0158 actively exploited?

No active exploitation of CVE-2014-0158 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2014-0158 be exploited remotely?

Yes. CVE-2014-0158 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2014-0158?

CVE-2014-0158 has a CVSS score of 8.8 (HIGH).

HOME VULNERABILITIESCVE-2014-0158

HIGH

CVE-2014-0158

CWE-119Published: April 10, 2018· Updated: Jun 17, 2026

8.8

CVSS v3.1

Official Description

Heap-based buffer overflow in the JPEG2000 image tile decoder in OpenJPEG before 1.5.2 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file because of incorrect j2k_decode, j2k_read_eoc, and tcd_decode_tile interaction, a related issue to CVE-2013-6045. NOTE: this is not a duplicate of CVE-2013-1447, because the scope of CVE-2013-1447 was specifically defined in http://openwall.com/lists/oss-security/2013/12/04/6 as only "null pointer dereferences, division by zero, and anything that would just fit as DoS."

NVD Source

Technical Analysis

CVE-2014-0158 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation does not require any privileges, though user interaction (Required) is needed, which slightly reduces the risk of mass automated attacks.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 8.8.

From a weakness classification perspective (CWE-119): Buffer overflow vulnerabilities can lead to arbitrary code execution or denial of service by corrupting adjacent memory.