opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openjpeg | Feb 7, 2020 | Jan 28, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 28, 2020 |
| Centos_linux | — | Upgrade openjpeg2-debugsourceUpgrade openjpeg2Upgrade openjpeg2-debuginfoUpgrade openjpeg2-tools-debuginfoUpgrade openjpeg2-toolsUpgrade openjpeg2-devel-docsUpgrade openjpeg2-devel | Feb 20, 2020 | Jan 28, 2020 |
| Debian | — | Upgrade openjpeg2 | Feb 3, 2020 | Jan 28, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade openjpeg2 | Feb 26, 2020 | Jan 28, 2020 |
| Oracle Missing Cpu Jul 2020 | — | Apply the July 2020 Critical Patch Update (CPU) for Oracle Database | Oct 20, 2020 | Jan 28, 2020 |
| Oracle Solaris | — | Upgrade image/library/openjpeg2 to version 2.3.1-11.4.20.0.1.2.0 on Solaris 11.4 | Jan 19, 2021 | Jan 28, 2020 |
| Oracle_linux | — | Upgrade openjpeg2-devel-docsUpgrade openjpeg2-develUpgrade openjpeg2-toolsUpgrade openjpeg2 | Oct 5, 2022 | Feb 7, 2020 |
| Redhat_linux | — | Upgrade openjpeg2-debuginfoUpgrade openjpeg2-toolsUpgrade openjpeg2Upgrade openjpeg2-tools-debuginfoUpgrade openjpeg2-debugsourceUpgrade openjpeg2-develUpgrade openjpeg2-devel-docs | Feb 20, 2020 | Jan 28, 2020 |
| Suse | — | Upgrade openjpeg-devel-32bitUpgrade libopenjpeg1Upgrade openjpeg-develUpgrade libopenjp2-7-32bitUpgrade libopenjpeg1-32bitUpgrade libopenjp2-7Upgrade openjpeg2-develUpgrade openjpegUpgrade openjpeg2 | Aug 9, 2024 | Jan 28, 2020 |
| Ubuntu | — | Upgrade libopenjp3d7Upgrade ghostscriptUpgrade libopenjpip-serverUpgrade libopenjp3d7 (Ubuntu Pro)Upgrade libgs9Upgrade libopenjp3d-toolsUpgrade libopenjpip7 (Ubuntu Pro)Upgrade libopenjp2-7Upgrade libopenjpip7Upgrade libopenjp2-toolsUpgrade libopenjpip-dec-serverUpgrade libopenjp2-7 (Ubuntu Pro)Upgrade libopenjpip-viewer | Sep 16, 2020 | Jan 28, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub