CVEs affecting projects tracked on Release Alert, from NVD & OSV.
jp2_encode in jp2/jp2_enc.c in JasPer 2.0.14 has a heap-based buffer over-read.