ZeroHour

CVE-2020-6851

PoC
CVSS 3.1
7.5 high
EPSS
5%p92
Published
()
Modified
Description

OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation.

Vendors
uclouvainfedoraprojectdebianredhatoracle
Products
openjpeg, fedora, debian linux, enterprise linux, enterprise linux desktop, enterprise linux eus, enterprise linux server, enterprise linux server aus, enterprise linux server tus, enterprise linux workstation, georaster, outside in technology
Weakness
CWE-787
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.