opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openjpeg | Feb 7, 2020 | Jan 28, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 28, 2020 |
| Centos_linux | — | Upgrade openjpeg2-develUpgrade openjpeg2-devel-docsUpgrade openjpeg2-debuginfoUpgrade openjpeg2Upgrade openjpeg2-debugsourceUpgrade openjpeg2-tools-debuginfoUpgrade openjpeg2-tools | Feb 20, 2020 | Jan 28, 2020 |
| Debian | — | Upgrade openjpeg2 | Feb 3, 2020 | Jan 28, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade openjpeg2 | Feb 26, 2020 | Jan 28, 2020 |
| Oracle Missing Cpu Jul 2020 | — | Apply the July 2020 Critical Patch Update (CPU) for Oracle Database | Oct 20, 2020 | Jan 28, 2020 |
| Oracle Solaris | — | Upgrade image/library/openjpeg2 to version 2.3.1-11.4.20.0.1.2.0 on Solaris 11.4 | Jan 19, 2021 | Jan 28, 2020 |
| Oracle_linux | — | Upgrade openjpeg2-devel-docsUpgrade openjpeg2-toolsUpgrade openjpeg2Upgrade openjpeg2-devel | Oct 5, 2022 | Feb 7, 2020 |
| Redhat_linux | — | Upgrade openjpeg2-tools-debuginfoUpgrade openjpeg2Upgrade openjpeg2-debugsourceUpgrade openjpeg2-debuginfoUpgrade openjpeg2-toolsUpgrade openjpeg2-devel-docsUpgrade openjpeg2-devel | Feb 20, 2020 | Jan 28, 2020 |
| Suse | — | Upgrade libopenjpeg1-32bitUpgrade openjpeg-devel-32bitUpgrade libopenjpeg1Upgrade libopenjp2-7Upgrade libopenjp2-7-32bitUpgrade openjpeg-develUpgrade openjpeg2-develUpgrade openjpegUpgrade openjpeg2 | Aug 9, 2024 | Jan 28, 2020 |
| Ubuntu | — | Upgrade libopenjpip7Upgrade libopenjpip-serverUpgrade libopenjpip7 (Ubuntu Pro)Upgrade ghostscriptUpgrade libopenjp3d7Upgrade libgs9Upgrade libopenjp3d7 (Ubuntu Pro)Upgrade libopenjp2-7Upgrade libopenjp3d-toolsUpgrade libopenjpip-dec-serverUpgrade libopenjpip-viewerUpgrade libopenjp2-7 (Ubuntu Pro)Upgrade libopenjp2-tools | Sep 16, 2020 | Jan 28, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub