Heap Buffer Overflow Vulnerability in OpenJPEG2 Affects Multiple Platforms
CVE-2020-27814

7.8HIGH

Key Information:

Vendor: Uclouvain
Status: Openjpeg
Vendor: CVE Published:; 26 January 2021

🔔 Create Uclouvain Vulnerability Alert

What is CVE-2020-27814?

A significant vulnerability exists in the OpenJPEG2 library, linked to improper handling of certain PNG format files, leading to a heap-buffer overflow. An attacker exploiting this vulnerability could potentially crash applications or execute arbitrary code with the same privileges as the user running the affected application.

Affected Version(s)

openjpeg before openjpeg 2.4.0

References

https://bugzilla.redhat.com/show_bug.cgi?id=1901998

x_refsource_MISC

https://github.com/uclouvain/openjpeg/issues/1283

x_refsource_MISC

https://security.gentoo.org/glsa/202101-29

vendor-advisoryx_refsource_GENTOO

CVSS V3.1

Score:

7.8

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 26, 2021
Vulnerability Reserved
Oct 27, 2020

CVE-2020-27814 Data

.