opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openjpeg | Feb 7, 2020 | Jan 28, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 28, 2020 |
| Centos_linux | — | Upgrade openjpeg2-tools-debuginfoUpgrade openjpeg2-debuginfoUpgrade openjpeg2-debugsourceUpgrade openjpeg2-toolsUpgrade openjpeg2Upgrade openjpeg2-devel-docsUpgrade openjpeg2-devel | Feb 20, 2020 | Jan 28, 2020 |
| Debian | — | Upgrade openjpeg2 | Feb 3, 2020 | Jan 28, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade openjpeg2 | Feb 26, 2020 | Jan 28, 2020 |
| Oracle Missing Cpu Jul 2020 | — | Apply the July 2020 Critical Patch Update (CPU) for Oracle Database | Oct 20, 2020 | Jan 28, 2020 |
| Oracle Solaris | — | Upgrade image/library/openjpeg2 to version 2.3.1-11.4.20.0.1.2.0 on Solaris 11.4 | Jan 19, 2021 | Jan 28, 2020 |
| Oracle_linux | — | Upgrade openjpeg2-devel-docsUpgrade openjpeg2Upgrade openjpeg2-develUpgrade openjpeg2-tools | Oct 5, 2022 | Feb 7, 2020 |
| Redhat_linux | — | Upgrade openjpeg2-devel-docsUpgrade openjpeg2-develUpgrade openjpeg2-debugsourceUpgrade openjpeg2-debuginfoUpgrade openjpeg2-toolsUpgrade openjpeg2Upgrade openjpeg2-tools-debuginfo | Feb 20, 2020 | Jan 28, 2020 |
| Suse | — | Upgrade libopenjpeg1-32bitUpgrade openjpeg-devel-32bitUpgrade libopenjpeg1Upgrade libopenjp2-7-32bitUpgrade libopenjp2-7Upgrade openjpeg-develUpgrade openjpeg2-develUpgrade openjpegUpgrade openjpeg2 | Aug 9, 2024 | Jan 28, 2020 |
| Ubuntu | — | Upgrade libopenjpip-viewerUpgrade libopenjpip-dec-serverUpgrade libopenjp2-toolsUpgrade libopenjp2-7 (Ubuntu Pro)Upgrade libopenjpip7Upgrade libopenjp3d7 (Ubuntu Pro)Upgrade ghostscriptUpgrade libopenjp3d-toolsUpgrade libopenjpip7 (Ubuntu Pro)Upgrade libgs9Upgrade libopenjp3d7Upgrade libopenjpip-serverUpgrade libopenjp2-7 | Sep 16, 2020 | Jan 28, 2020 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub