Published: 05/01/2021 Updated: 07/11/2023

CVSS v2 Base Score: 7.1 | Impact Score: 6.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 632

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C

A flaw was found in OpenJPEG in versions before 2.4.0. This flaw allows an malicious user to provide specially crafted input to the conversion or encoding functionality, causing an out-of-bounds read. The highest threat from this vulnerability is system availability.

Vulnerable Product	Search on Vulmon	Subscribe to Product
uclouvain openjpeg
fedoraproject fedora 32
fedoraproject fedora 33
oracle outside in technology 8.5.5
debian debian linux 9.0
debian debian linux 10.0

Debian Bug report logs - #983663 openjpeg2: CVE-2020-27843 Package: src:openjpeg2; Maintainer for src:openjpeg2 is Debian PhotoTools Maintainers <pkg-phototools-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 28 Feb 2021 09:39:02 UTC Severity: important Tags: security, ...

Multiple vulnerabilities have been discovered in openjpeg2, the open-source JPEG 2000 codec, which could result in denial of service or the execution of arbitrary code when opening a malformed image For the stable distribution (buster), these problems have been fixed in version 230-2+deb10u2 We recommend that you upgrade your openjpeg2 packages ...

Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pic in OpenJPEG through 230 allow remote attackers to cause a denial of service (application crash) (CVE-2018-20845) An improper computation of p_tx0, p_tx1, p_ty0 and p_ty1 in the function opj_get_encoding_parameters in openjp2/pic in Ope ...

An out-of-bounds read was found in opj_t2_encode_packet when small precincts and an origin shift are given in OpenJPEG 231 ...

CWE-125 https://bugzilla.redhat.com/show_bug.cgi?id=1907516 https://security.gentoo.org/glsa/202101-29 https://www.debian.org/security/2021/dsa-4882 https://www.oracle.com/security-alerts/cpuApr2021.html https://www.oracle.com//security-alerts/cpujul2021.html https://lists.debian.org/debian-lts-announce/2022/04/msg00006.html https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJUPGIZE6A4O52EBOF75MCXJOL6MUCRV/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=983663 https://nvd.nist.gov https://www.debian.org/security/2021/dsa-4882

CVE-2020-27843

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect