Heap-Based Buffer Overflow in OpenJPEG Affects Multiple Versions
CVE-2020-6851

7.5HIGH

Key Information:

Vendor: Uclouvain
Status: Openjpeg
Vendor: CVE Published:; 13 January 2020

What is CVE-2020-6851?

OpenJPEG, a library for handling JPEG 2000 images, contains a vulnerability that can lead to a heap-based buffer overflow. This issue arises in the 'opj_t1_clbl_decode_processor' function due to insufficient validation of image dimensions through 'opj_j2k_update_image_dimensions'. Exploiting this vulnerability may allow an attacker to execute arbitrary code, potentially compromising the affected system.