Buffer Overflow Vulnerability in OpenJPEG Encoder Affecting Multiple Vendors
CVE-2020-27824
5.5MEDIUM
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2020-27824?
A vulnerability exists in the OpenJPEG encoder's opj_dwt_calc_explicit_stepsizes() function, which allows attackers to exploit crafted input data. This can lead to a buffer overflow, potentially compromising system availability and enabling attackers to impact the performance and stability of the affected applications.
Affected Version(s)
openjpeg openjpeg 2.4.0
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.