opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openjpeg | Feb 7, 2020 | Jan 28, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 28, 2020 |
| Centos_linux | — | Upgrade openjpeg2-devel-docsUpgrade openjpeg2-develUpgrade openjpeg2-tools-debuginfoUpgrade openjpeg2Upgrade openjpeg2-debugsourceUpgrade openjpeg2-debuginfoUpgrade openjpeg2-tools | Feb 20, 2020 | Jan 28, 2020 |
| Debian | — | Upgrade openjpeg2 | Feb 3, 2020 | Jan 28, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade openjpeg2 | Feb 26, 2020 | Jan 28, 2020 |
| Oracle Missing Cpu Jul 2020 | — | Apply the July 2020 Critical Patch Update (CPU) for Oracle Database | Oct 20, 2020 | Jan 28, 2020 |
| Oracle Solaris | — | Upgrade image/library/openjpeg2 to version 2.3.1-11.4.20.0.1.2.0 on Solaris 11.4 | Jan 19, 2021 | Jan 28, 2020 |
| Oracle_linux | — | Upgrade openjpeg2-devel-docsUpgrade openjpeg2Upgrade openjpeg2-toolsUpgrade openjpeg2-devel | Oct 5, 2022 | Feb 7, 2020 |
| Redhat_linux | — | Upgrade openjpeg2-develUpgrade openjpeg2-devel-docsUpgrade openjpeg2-debuginfoUpgrade openjpeg2-tools-debuginfoUpgrade openjpeg2-toolsUpgrade openjpeg2-debugsourceUpgrade openjpeg2 | Feb 20, 2020 | Jan 28, 2020 |
| Suse | — | Upgrade openjpeg2-develUpgrade openjpeg2Upgrade openjpegUpgrade libopenjp2-7-32bitUpgrade openjpeg-develUpgrade libopenjp2-7Upgrade libopenjpeg1-32bitUpgrade openjpeg-devel-32bitUpgrade libopenjpeg1 | Aug 9, 2024 | Jan 28, 2020 |
| Ubuntu | — | Upgrade libopenjp3d-toolsUpgrade libopenjp3d7Upgrade libopenjp3d7 (Ubuntu Pro)Upgrade libopenjpip7Upgrade libopenjpip-serverUpgrade libopenjpip7 (Ubuntu Pro)Upgrade ghostscriptUpgrade libopenjp2-7Upgrade libgs9Upgrade libopenjp2-toolsUpgrade libopenjpip-dec-serverUpgrade libopenjp2-7 (Ubuntu Pro)Upgrade libopenjpip-viewer | Sep 16, 2020 | Jan 28, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub