A flaw was found in openjpeg's src/lib/openjp2/t2.c in versions prior to 2.4.0. This flaw allows an attacker to provide crafted input to openjpeg during conversion and encoding, causing an out-of-bounds write. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-openjpegalpine-linux-upgrade-chromiumalpine-linux-upgrade-qt5-qtwebengine | Aug 22, 2024 | Jan 5, 2021 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Jan 5, 2021 | |
| Debian | debian-upgrade-openjpeg2 | Feb 10, 2021 | Jan 5, 2021 | |
| Freebsd | freebsd-upgrade-package-chromium | Mar 5, 2021 | Mar 4, 2021 | |
| Gentoo Linux | gentoo-linux-upgrade-media-libs-openjpeg | Jan 27, 2021 | Jan 5, 2021 | |
| Google Chrome | google-chrome-upgrade-latest | Mar 5, 2021 | Jan 5, 2021 | |
| Microsoft Edge | microsoft-edge-upgrade-latest | Nov 17, 2021 | Jan 5, 2021 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-image-library-openjpeg2-2-4-0-11-4-31-0-1-88-1 | Mar 17, 2021 | Jan 5, 2021 | |
| Redhat_linux | — | no-fix-redhat-rpm-package | Jul 9, 2025 | Jan 5, 2021 |
| Suse | — | suse-upgrade-chromedriversuse-upgrade-chromium | Mar 9, 2021 | Jan 5, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub