Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.8
CVSSv3

CVE-2020-27844

Published: 05/01/2021 Updated: 07/11/2023
CVSS v2 Base Score: 8.3 | Impact Score: 8.5 | Exploitability Score: 8.6
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 739
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:C
Subscribe to Openjpeg

Vulnerability Summary

A flaw was found in openjpeg's src/lib/openjp2/t2.c in versions before 2.4.0. This flaw allows an malicious user to provide crafted input to openjpeg during conversion and encoding, causing an out-of-bounds write. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

uclouvain openjpeg

debian debian linux 9.0

oracle outside in technology 8.5.5

Vendor Advisories

Arch Linux Issues:
A heap-based buffer overflow was discovered in lib/openjp2/t2c:973 in the current master (commit 18b1138fbe3bb0ae4aa2bf1369f9430a8ec6fa00) of OpenJPEG ...
Google Chrome: Stable Channel Update for Desktop
The Chrome team is delighted to announce the promotion of Chrome 89 to the stable channel for Windows, Mac and Linux This will roll out over the coming days/weeksChrome 890438972 contains a number of fixes and improvements -- a list of changes is available in the log Watch out for upcoming Chrome and Chromium blog pos ...

References

CWE-20https://bugzilla.redhat.com/show_bug.cgi?id=1907521https://security.gentoo.org/glsa/202101-29https://lists.debian.org/debian-lts-announce/2021/02/msg00011.htmlhttps://www.oracle.com/security-alerts/cpuApr2021.htmlhttps://www.oracle.com//security-alerts/cpujul2021.htmlhttps://nvd.nist.govhttps://security.archlinux.org/CVE-2020-27844https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4761command injectionCVE-2024-3676IDORCVE-2024-30039CVE-2024-32113CVE-2024-30049CVE-2024-4776SQL injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook