CVE-2020-27828
PoC —CVSS 3.1
7.8 high
EPSS
1%p71
Published
()
Modified
Description
There's a flaw in jasper's jpc encoder in versions prior to 2.0.23. Crafted input provided to jasper by an attacker could cause an arbitrary out-of-bounds write. This could potentially affect data confidentiality, integrity, or application availability.
- Vendors
- jasper projectfedoraproject
- Products
- jasper, fedora
- Weakness
- CWE-20
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.