NetSight
IP …
high7.5

CVE-2020-6851

OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions vali…

Impact

OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation.

Affected products

VendorProductAffected versions
UclouvainOpenjpeg
through 2.3.1
FedoraprojectFedora
Versions 30, 31
DebianDebian Linux
Versions 8.0, 9.0, 10.0
RedhatEnterprise Linux
Version 8.0
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Eus
Versions 7.7, 8.1, 8.2, 8.4
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Server Aus
Versions 7.7, 8.2, 8.4
RedhatEnterprise Linux Server Tus
Versions 7.7, 8.2, 8.4
RedhatEnterprise Linux Workstation
Version 7.0
OracleGeoraster
Version 18c
OracleOutside In Technology
Versions 8.5.4, 8.5.5

Weakness classification

CWE-787

References