Related Vulnerabilities: CVE-2020-27814  

A heap-buffer overwrites error was discovered in lib/openjp2/mqc.c in OpenJPEG 2.3.1. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly remote code execution.

Severity Medium

Remote No

Type Arbitrary code execution

Description

A heap-buffer overwrites error was discovered in lib/openjp2/mqc.c in OpenJPEG 2.3.1. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly remote code execution.

AVG-1343 openjpeg2 2.3.1-3 Medium Vulnerable

https://github.com/uclouvain/openjpeg/issues/1283
https://github.com/uclouvain/openjpeg/pull/1303
https://github.com/uclouvain/openjpeg/commit/4ce7d285a55d29b79880d0566d4b010fe1907aa9