A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. An attacker could use this flaw to cause an application crash or in some cases execute arbitrary code with the permission of the user running such an application.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-openjpeg2alma-upgrade-openjpeg2-develalma-upgrade-openjpeg2-devel-docsalma-upgrade-openjpeg2-tools | May 4, 2022 | Jan 26, 2021 | |
| Alpine Linux | alpine-linux-upgrade-openjpeg | Jan 25, 2021 | Jan 25, 2021 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-openjpeg2amazon-linux-ami-2-upgrade-openjpeg2-debuginfoamazon-linux-ami-2-upgrade-openjpeg2-develamazon-linux-ami-2-upgrade-openjpeg2-devel-docsamazon-linux-ami-2-upgrade-openjpeg2-tools | Jul 4, 2022 | Jan 26, 2021 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Jan 25, 2021 | |
| Centos_linux | — | centos-upgrade-openjpeg2centos-upgrade-openjpeg2-debuginfocentos-upgrade-openjpeg2-debugsourcecentos-upgrade-openjpeg2-devel-docscentos-upgrade-openjpeg2-toolscentos-upgrade-openjpeg2-tools-debuginfo | Nov 10, 2021 | Jan 26, 2021 |
| Debian | debian-upgrade-openjpeg2 | Feb 10, 2021 | Jan 26, 2021 | |
| Gentoo Linux | gentoo-linux-upgrade-media-libs-openjpeg | Jan 27, 2021 | Jan 26, 2021 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-openjpeg2 | Feb 2, 2021 | Jan 26, 2021 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-openjpeg2 | Aug 10, 2021 | Jan 26, 2021 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-image-library-openjpeg2-2-4-0-11-4-31-0-1-88-1 | Mar 17, 2021 | Jan 26, 2021 | |
| Oracle_linux | — | oracle-linux-upgrade-openjpeg2oracle-linux-upgrade-openjpeg2-develoracle-linux-upgrade-openjpeg2-devel-docsoracle-linux-upgrade-openjpeg2-tools | Nov 17, 2021 | Nov 23, 2020 |
| Redhat_linux | redhat-upgrade-openjpeg2redhat-upgrade-openjpeg2-debuginforedhat-upgrade-openjpeg2-debugsourceredhat-upgrade-openjpeg2-develredhat-upgrade-openjpeg2-devel-docsredhat-upgrade-openjpeg2-toolsredhat-upgrade-openjpeg2-tools-debuginfo | Nov 10, 2021 | Jan 26, 2021 | |
| Rocky_linux | rocky-upgrade-openjpeg2rocky-upgrade-openjpeg2-debuginforocky-upgrade-openjpeg2-debugsourcerocky-upgrade-openjpeg2-develrocky-upgrade-openjpeg2-toolsrocky-upgrade-openjpeg2-tools-debuginfo | Mar 12, 2024 | Jan 26, 2021 | |
| Suse | — | suse-upgrade-libopenjp2-7suse-upgrade-libopenjp2-7-32bitsuse-upgrade-openjpeg2suse-upgrade-openjpeg2-devel | Aug 9, 2024 | Jan 26, 2021 |
| Ubuntu | ubuntu-pro-upgrade-libopenjp2-7ubuntu-pro-upgrade-libopenjp3d7ubuntu-pro-upgrade-libopenjpip7ubuntu-upgrade-ghostscriptubuntu-upgrade-libgs9ubuntu-upgrade-libopenjp2-7ubuntu-upgrade-libopenjp3d7ubuntu-upgrade-libopenjpip7 | Jan 8, 2021 | Jan 7, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub