OpenJPEG Encoder Vulnerability Exposing Multiple System Risks

CVE-2020-27823

What is CVE-2020-27823?

A significant flaw exists in the OpenJPEG encoder, where specially crafted x,y offset inputs can be utilized during the encoding process. This vulnerability poses a risk to the confidentiality and integrity of system data, as well as potentially affecting the availability of services relying on OpenJPEG. Attackers may exploit this flaw to disrupt normal operations and extract sensitive information from affected systems.

References