CVE-2020-27841CWE-122

CVE-2020-27841: vulnerability in openjpeg

Published · Updated

Follow this CVE+ Monitor openjpeg+ Monitor openjpeg2

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.5%
There's a flaw in openjpeg in versions prior to 2.4.0 in src/lib/openjp2/pi.c. When an attacker is able to provide crafted input to be processed by the openjpeg encoder, this could cause an out-of-bounds read. The greatest impact from this flaw is to application availability.
Affected products
n/a · openjpeg