{"id":"CVE-2020-27845","aliases":["ALSA-2021:4251","AZL-44712","BELL-CVE-2020-27845","DEBIAN-CVE-2020-27845","DLA-2550-1","DSA-4882-1","EUVD-2020-20343","GHSA-4jrm-wf8f-qvqh","JLSEC-2026-542","MGASA-2020-0478","OESA-2021-1118","RHSA-2021:4251","RLSA-2021:4251","SUSE-SU-2022:3801-1","SUSE-SU-2022:3802-1","SUSE-SU-2022:4082-1","UBUNTU-CVE-2020-27845","USN-4685-1","USN-4686-1","USN-4880-1","USN-5952-1","openSUSE-SU-2024:13571-1"],"status":"published","title":"There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is...","description":"There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpeg's conversion/encoding functionality, they could cause an out-of-bounds read. The highest impact of this flaw is to application availability.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.0146,"percentile":0.73796,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122","CWE-125"],"published":"2020-12-29T11:57:17Z","modified":"2026-11-05T05:36:30Z","fixes":[{"ecosystem":"Azure Linux:3","package":"openjpeg2","fixed_in":["2.3.1-12"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"openjpeg2","fixed_in":["2.4.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openjpeg2","fixed_in":["2.4.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openjpeg2","fixed_in":["2.4.0-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"OpenJpeg_jll","fixed_in":["2.4.0+0"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"ghostscript","fixed_in":["9.26~dfsg+0-0ubuntu0.16.04.14"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"openjpeg2","fixed_in":["2.1.2-1.1+deb9u6build0.16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"ghostscript","fixed_in":["9.26~dfsg+0-0ubuntu0.18.04.14"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"openjpeg2","fixed_in":["2.3.0-2+deb10u2build0.18.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"openjpeg2","fixed_in":["2.3.1-1ubuntu4.20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"openjpeg2","fixed_in":["2.3.1-1ubuntu5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-4.el8"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"openjpeg2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-4.el8"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"openjpeg2-devel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-4.el8"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"openjpeg2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-4.el8"}]}],"bundled":14},{"source":"osv","ecosystem":"Azure Linux:3","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-12"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-1.1+deb9u6"}]}],"versions":["2.1.2-1.1","2.1.2-1.1+deb9u1","2.1.2-1.1+deb9u2","2.1.2-1.1+deb9u3","2.1.2-1.1+deb9u4","2.1.2-1.1+deb9u5"],"bundled":5},{"source":"osv","ecosystem":"Debian:10","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-2+deb10u2"}]}],"versions":["2.3.0-2","2.3.0-2+deb10u1"],"bundled":10},{"source":"osv","ecosystem":"Julia","package":"OpenJpeg_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.4.0+0"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-1.6.mga7"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:20.03-LTS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-5.oe1"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-5.oe1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.0-4.el8"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openjpeg2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.0-4.el8"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openjpeg2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.0-4.el8"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openjpeg2-devel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.0-4.el8"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openjpeg2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.0-4.el8"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openjpeg2-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.0-4.el8"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openjpeg2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.0-4.el8"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openjpeg2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.0-4.el8"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openjpeg2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.0-4.el8"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openjpeg2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.0-4.el8"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openjpeg2-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.0-4.el8"}]}],"bundled":14},{"source":"osv","ecosystem":"Rocky Linux:8","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.0-4.el8"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-4.18.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-4.18.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-4.18.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-4.18.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-4.18.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-4.18.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-4.18.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-4.18.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.8.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.8.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP3","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.8.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.8.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.8.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.8.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.8.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.8.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.8.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.8.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.8.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.8.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.8.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.8.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.8.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.8.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.8.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.8.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.8.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.8.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.8.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.8.1"}]}],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.8.1"}]}],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.8.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP3","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-150000.4.10.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP4","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-150000.4.10.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-150000.4.10.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-150000.4.10.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-150000.4.10.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-150000.4.10.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-150000.4.10.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-150000.4.10.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-150000.4.10.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-150000.4.10.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-150000.4.10.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-150000.4.10.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3+dfsg-4.6ubuntu2","1.3+dfsg-4.7ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.26~dfsg+0-0ubuntu0.16.04.14"}]}],"versions":["9.16~dfsg~0-0ubuntu3","9.16~dfsg~0-0ubuntu4","9.18~dfsg~0-0ubuntu1","9.18~dfsg~0-0ubuntu2","9.18~dfsg~0-0ubuntu2.2","9.18~dfsg~0-0ubuntu2.3","9.18~dfsg~0-0ubuntu2.4","9.18~dfsg~0-0ubuntu2.6","9.18~dfsg~0-0ubuntu2.7","9.18~dfsg~0-0ubuntu2.8","9.18~dfsg~0-0ubuntu2.9","9.25~dfsg+1-0ubuntu0.16.04.1","9.25~dfsg+1-0ubuntu0.16.04.2","9.25~dfsg+1-0ubuntu0.16.04.3","9.26~dfsg+0-0ubuntu0.16.04.1","9.26~dfsg+0-0ubuntu0.16.04.3","9.26~dfsg+0-0ubuntu0.16.04.4","9.26~dfsg+0-0ubuntu0.16.04.5","9.26~dfsg+0-0ubuntu0.16.04.6","9.26~dfsg+0-0ubuntu0.16.04.7","9.26~dfsg+0-0ubuntu0.16.04.8","9.26~dfsg+0-0ubuntu0.16.04.9","9.26~dfsg+0-0ubuntu0.16.04.10","9.26~dfsg+0-0ubuntu0.16.04.11","9.26~dfsg+0-0ubuntu0.16.04.12","9.26~dfsg+0-0ubuntu0.16.04.13"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-1.1+deb9u6build0.16.04.1"}]}],"versions":["2.1.0-2.1","2.1.0-2.1ubuntu0.1","2.1.2-1.1+deb9u2build0.1","2.1.2-1.1+deb9u3build0.16.04.1","2.1.2-1.1+deb9u5build0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"insighttoolkit4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.8.1-1ubuntu3","4.8.1-1ubuntu4","4.8.2-3.1ubuntu1","4.9.0-3ubuntu2","4.9.0-4ubuntu1","4.9.0-4ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.5.2-3.1","1:1.5.2-3.1ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.26~dfsg+0-0ubuntu0.18.04.14"}]}],"versions":["9.21~dfsg+1-0ubuntu3","9.22~dfsg+1-0ubuntu1","9.22~dfsg+1-0ubuntu1.1","9.22~dfsg+1-0ubuntu1.2","9.25~dfsg+1-0ubuntu0.18.04.1","9.25~dfsg+1-0ubuntu0.18.04.2","9.26~dfsg+0-0ubuntu0.18.04.1","9.26~dfsg+0-0ubuntu0.18.04.3","9.26~dfsg+0-0ubuntu0.18.04.4","9.26~dfsg+0-0ubuntu0.18.04.5","9.26~dfsg+0-0ubuntu0.18.04.6","9.26~dfsg+0-0ubuntu0.18.04.7","9.26~dfsg+0-0ubuntu0.18.04.8","9.26~dfsg+0-0ubuntu0.18.04.9","9.26~dfsg+0-0ubuntu0.18.04.10","9.26~dfsg+0-0ubuntu0.18.04.11","9.26~dfsg+0-0ubuntu0.18.04.12","9.26~dfsg+0-0ubuntu0.18.04.13"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-2+deb10u2build0.18.04.1"}]}],"versions":["2.2.0-1","2.3.0-1","2.3.0-2build0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.78.c+dfsg0-2build1","2.79+dfsg0-2build1","2.79+dfsg0-3","2.79+dfsg0-3build1","2.79.b+dfsg0-1","2.79.b+dfsg0-1ubuntu1.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"insighttoolkit4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.12.2-dfsg1-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.9.1+dfsg-4","5.9.1+dfsg-4ubuntu1","5.9.2+dfsg-2ubuntu1","5.9.3+dfsg-0ubuntu1","5.9.4+dfsg-0ubuntu1","5.9.5+dfsg-0ubuntu2","5.9.5+dfsg-0ubuntu2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.5-1","5.0.2-1","5.0.2-1build1","5.0.2-1build2","5.0.2-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-1ubuntu4.20.04.1"}]}],"versions":["2.3.0-2","2.3.0-2build1","2.3.1-1","2.3.1-1ubuntu3","2.3.1-1ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"insighttoolkit4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.12.2-dfsg1-4.1ubuntu1","4.13.2-dfsg1-1ubuntu1","4.13.2-dfsg1-4ubuntu1","4.13.2-dfsg1-6","4.13.2-dfsg1-6ubuntu1","4.13.2-dfsg1-8"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.12.4+dfsg-1ubuntu1","5.12.4+dfsg-1ubuntu3","5.12.5+dfsg-3ubuntu1","5.12.5+dfsg-6ubuntu2","5.12.5+dfsg-7","5.12.5+dfsg-7build1","5.12.8+dfsg-0ubuntu1","5.12.8+dfsg-0ubuntu1.1","5.12.8+dfsg-0ubuntu1.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.3-1build2","5.0.3-1build3","5.0.3-1build4","5.0.3-1build5","5.0.3-1ubuntu0.20.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"insighttoolkit4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.13.3withdata-dfsg1-4.1","4.13.3withdata-dfsg2-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-1ubuntu5"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.6+dfsg-1","5.15.6+dfsg-2","5.15.7+dfsg-2","5.15.8+dfsg-1","5.15.8+dfsg-1build1","5.15.8+dfsg-1build2","5.15.8+dfsg-2","5.15.9+dfsg-1","5.15.9+dfsg-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.3-1build8","5.0.3-1build9","5.0.3-1ubuntu0.22.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.15+dfsg-2","5.15.15+dfsg-2build2","5.15.15+dfsg-2ubuntu1","5.15.16+dfsg-1","5.15.16+dfsg-1ubuntu2","5.15.16+dfsg-1ubuntu4","5.15.16+dfsg-3","5.15.16+dfsg-3ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.1.3+dfsg-1build4","5.1.3+dfsg-1build5","5.1.3+dfsg-1build6","5.1.3+dfsg-1build7","5.1.3+dfsg-1build8","5.1.3+dfsg-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.18+dfsg-2","5.15.18+dfsg-2build1","5.15.19+dfsg-1","5.15.19+dfsg2-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.1.3+dfsg-3","5.1.3+dfsg-3build1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.19+dfsg2-4","5.15.19+dfsg2-6","5.15.19+dfsg2-7"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.0.1+dfsg-3build1","6.0.1+dfsg-3build2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.1.3+dfsg-3build1","6.0.1+dfsg-3","6.0.1+dfsg-3build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:26.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.19+dfsg2-1","5.15.19+dfsg2-1build1","5.15.19+dfsg2-2","5.15.19+dfsg2-3","5.15.19+dfsg2-4","5.15.19+dfsg2-4ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-1ubuntu4.20.04.1"}]}],"versions":["2.3.0-2","2.3.0-2build1","2.3.1-1","2.3.1-1ubuntu3","2.3.1-1ubuntu4"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.26~dfsg+0-0ubuntu0.16.04.14"}]}],"versions":["9.16~dfsg~0-0ubuntu3","9.16~dfsg~0-0ubuntu4","9.18~dfsg~0-0ubuntu1","9.18~dfsg~0-0ubuntu2","9.18~dfsg~0-0ubuntu2.2","9.18~dfsg~0-0ubuntu2.3","9.18~dfsg~0-0ubuntu2.4","9.18~dfsg~0-0ubuntu2.6","9.18~dfsg~0-0ubuntu2.7","9.18~dfsg~0-0ubuntu2.8","9.18~dfsg~0-0ubuntu2.9","9.25~dfsg+1-0ubuntu0.16.04.1","9.25~dfsg+1-0ubuntu0.16.04.2","9.25~dfsg+1-0ubuntu0.16.04.3","9.26~dfsg+0-0ubuntu0.16.04.1","9.26~dfsg+0-0ubuntu0.16.04.3","9.26~dfsg+0-0ubuntu0.16.04.4","9.26~dfsg+0-0ubuntu0.16.04.5","9.26~dfsg+0-0ubuntu0.16.04.6","9.26~dfsg+0-0ubuntu0.16.04.7","9.26~dfsg+0-0ubuntu0.16.04.8","9.26~dfsg+0-0ubuntu0.16.04.9","9.26~dfsg+0-0ubuntu0.16.04.10","9.26~dfsg+0-0ubuntu0.16.04.11","9.26~dfsg+0-0ubuntu0.16.04.12","9.26~dfsg+0-0ubuntu0.16.04.13"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.26~dfsg+0-0ubuntu0.18.04.14"}]}],"versions":["9.21~dfsg+1-0ubuntu3","9.22~dfsg+1-0ubuntu1","9.22~dfsg+1-0ubuntu1.1","9.22~dfsg+1-0ubuntu1.2","9.25~dfsg+1-0ubuntu0.18.04.1","9.25~dfsg+1-0ubuntu0.18.04.2","9.26~dfsg+0-0ubuntu0.18.04.1","9.26~dfsg+0-0ubuntu0.18.04.3","9.26~dfsg+0-0ubuntu0.18.04.4","9.26~dfsg+0-0ubuntu0.18.04.5","9.26~dfsg+0-0ubuntu0.18.04.6","9.26~dfsg+0-0ubuntu0.18.04.7","9.26~dfsg+0-0ubuntu0.18.04.8","9.26~dfsg+0-0ubuntu0.18.04.9","9.26~dfsg+0-0ubuntu0.18.04.10","9.26~dfsg+0-0ubuntu0.18.04.11","9.26~dfsg+0-0ubuntu0.18.04.12","9.26~dfsg+0-0ubuntu0.18.04.13"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-1.1+deb9u6build0.16.04.1"}]}],"versions":["2.1.0-2.1","2.1.0-2.1ubuntu0.1","2.1.2-1.1+deb9u2build0.1","2.1.2-1.1+deb9u3build0.16.04.1","2.1.2-1.1+deb9u5build0.16.04.1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-1.1+deb9u6ubuntu0.1~esm3"}]}],"versions":["2.1.0-2.1","2.1.0-2.1ubuntu0.1","2.1.2-1.1+deb9u2build0.1","2.1.2-1.1+deb9u3build0.16.04.1","2.1.2-1.1+deb9u3ubuntu0.1~esm1","2.1.2-1.1+deb9u5build0.16.04.1","2.1.2-1.1+deb9u5ubuntu0.1~esm1","2.1.2-1.1+deb9u6build0.16.04.1","2.1.2-1.1+deb9u6ubuntu0.1~esm1"],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-2+deb10u2build0.18.04.1"}]}],"versions":["2.2.0-1","2.3.0-1","2.3.0-2build0.18.04.1"],"bundled":10}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"oracle","product":"outside_in_technology"},{"vendor":"uclouvain","product":"openjpeg"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1907523","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix","web","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJUPGIZE6A4O52EBOF75MCXJOL6MUCRV/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/202101-29","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/02/msg00011.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://www.debian.org/security/2021/dsa-4882","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27845","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WJUPGIZE6A4O52EBOF75MCXJOL6MUCRV/"},{"url":"https://github.com/advisories/GHSA-4jrm-wf8f-qvqh"},{"url":"https://errata.almalinux.org/8/ALSA-2021-4251.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2018-20845","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2018-20847","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2018-5727","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2018-5785","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-12973","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-15389","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-27814","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-27823","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-27824","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-27842","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-27843","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-27845","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-29338","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-3575","tags":["report"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2020-27845","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-27845","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0478.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=27903","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/THY4LKGUS3D4XE5YHKLMTPVLURQ7OV57/","tags":["web"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1118","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27814","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27841","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27843","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4251","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1536552","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1537758","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728505","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728509","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1732270","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1852869","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1901998","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1905723","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1905762","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1907513","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1907516","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1950101","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1957616","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4251.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5727","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5727","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5727","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5785","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5785","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5785","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-20845","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-20845","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20845","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-20847","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-20847","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20847","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12973","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12973","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12973","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-15389","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-15389","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-15389","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-27814","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-27814","tags":["advisory"]},{"url":"https://github.com/uclouvain/openjpeg/issues/1283","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-27823","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-27823","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27823","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-27824","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-27824","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27824","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-27842","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-27842","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27842","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-27843","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-27843","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-27845","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-27845","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3575","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3575","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3575","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-29338","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-29338","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-29338","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2021:4251","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223801-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1149789","tags":["report"]},{"url":"https://bugzilla.suse.com/1179821","tags":["report"]},{"url":"https://bugzilla.suse.com/1180043","tags":["report"]},{"url":"https://bugzilla.suse.com/1180044","tags":["report"]},{"url":"https://bugzilla.suse.com/1180046","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-21010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27845","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223802-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1140205","tags":["report"]},{"url":"https://bugzilla.suse.com/1179594","tags":["report"]},{"url":"https://bugzilla.suse.com/1180042","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27841","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20224082-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-27845","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4685-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4686-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4880-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5952-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-15389","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27814","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27823","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27824","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27841","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27842","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27843","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5727","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-6851","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-8112","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1122","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-27845","description":"There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpeg's conversion/encoding functionality, they could cause an out-of-bounds read. The highest impact of this flaw is to application availability.","status":"published","published":"2021-01-05T17:44:30Z","modified":"2024-08-04T16:25:43.862Z","cwes":["CWE-125"],"updated_at":"2026-11-02T14:35:53.552996Z"}],"euvd":[{"id":"EUVD-2020-20343","description":"There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpeg's conversion/encoding functionality, they could cause an out-of-bounds read. The highest impact of this flaw is to application availability.","status":"published","published":"2021-01-05T17:44:30Z","modified":"2024-08-04T16:25:43Z","updated_at":"2026-11-03T03:07:11.320494Z"}],"ghsa":[{"id":"GHSA-4jrm-wf8f-qvqh","title":"There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is...","description":"There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpeg's conversion/encoding functionality, they could cause an out-of-bounds read. The highest impact of this flaw is to application availability.","status":"published","published":"2022-05-24T17:38:00Z","modified":"2023-01-27T05:06:58Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-122","CWE-125"],"updated_at":"2026-11-02T14:43:01.786793Z"}],"nvd":[{"id":"CVE-2020-27845","description":"There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpeg's conversion/encoding functionality, they could cause an out-of-bounds read. The highest impact of this flaw is to application availability.","status":"published","published":"2021-01-05T18:15:14.207Z","modified":"2026-06-17T03:09:43.75Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:06:28.340168Z"}],"osv":[{"id":"AZL-44712","title":"CVE-2020-27845 affecting package openjpeg2 for versions less than 2.3.1-12","description":"There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpeg's conversion/encoding functionality, they could cause an out-of-bounds read. The highest impact of this flaw is to application availability.","status":"published","published":"2021-01-05T18:15:14Z","modified":"2026-11-05T05:36:30Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-05T16:41:20.107976Z"},{"id":"BELL-CVE-2020-27845","title":"CVE-2020-27845 does not affect BellSoft software","status":"withdrawn","published":"2021-01-05T18:15:00Z","modified":"2026-01-26T09:45:45.062358Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:15.925958Z"},{"id":"CVE-2020-27845","description":"There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpeg's conversion/encoding functionality, they could cause an out-of-bounds read. The highest impact of this flaw is to application availability.","status":"published","published":"2021-01-05T18:15:14.207Z","modified":"2026-10-24T10:30:33.351019138Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:16.248747Z"},{"id":"DEBIAN-CVE-2020-27845","description":"There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpeg's conversion/encoding functionality, they could cause an out-of-bounds read. The highest impact of this flaw is to application availability.","status":"published","published":"2021-01-05T18:15:14.207Z","modified":"2026-10-26T12:02:42.589864109Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:33.729655Z"},{"id":"JLSEC-2026-542","description":"There's a flaw in `src/lib/openjp2/pi.c` of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpeg's conversion/encoding functionality, they could cause an out-of-bounds read. The highest impact of this flaw is to application availability.","status":"published","published":"2026-05-26T19:31:24.313Z","modified":"2026-07-25T18:24:37.112231541Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:47:18.573531Z"},{"id":"OESA-2021-1118","title":"openjpeg2 security update","description":"OpenJPEG is an open-source JPEG 2000 codec written in C language. It has been developed in order to promote the use of JPEG 2000, a still-image compression standard from the Joint Photographic Experts Group (JPEG). Since April 2015, it is officially recognized by ISO/IEC and ITU-T as a JPEG 2000 Reference Software.\r\n\r\nSecurity Fix(es):\r\n\r\nA heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. An attacker could use this flaw to cause an application crash or in some cases execute arbitrary code with the permission of the user running such an application.(CVE-2020-27814)\r\n\r\nTheres a flaw in openjpeg in versions prior to 2.4.0 in src/lib/openjp2/pi.c. When an attacker is able to provide crafted input to be processed by the openjpeg encoder, this could cause an out-of-bounds read. The greatest impact from this flaw is to application availability.(CVE-2020-27841)\r\n\r\nA flaw was found in OpenJPEG in versions prior to 2.4.0. This flaw allows an attacker to provide specially crafted input to the conversion or encoding functionality, causing an out-of-bounds read. The highest threat from this vulnerability is system availability.(CVE-2020-27843)\r\n\r\nTheres a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpegs conversion/encoding functionality, they could cause an out-of-bounds read. The highest impact of this flaw is to application availability.(CVE-2020-27845)","status":"published","published":"2021-04-07T11:04:21Z","modified":"2026-08-18T01:15:10.294443446Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2021:4251","title":"Red Hat Security Advisory: openjpeg2 security update","status":"published","published":"2024-09-16T06:03:27Z","modified":"2026-06-27T10:14:24Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RLSA-2021:4251","title":"Moderate: openjpeg2 security update","description":"OpenJPEG is an open source library for reading and writing image files in JPEG2000 format.\n\nThe following packages have been upgraded to a later upstream version: openjpeg2 (2.4.0).\n\nSecurity Fix(es):\n\n* openjpeg: use-after-free and double-free via a mix of valid and invalid files in a directory operated on by the decompressor (CVE-2020-15389)\n\n* openjpeg: heap-buffer-overflow in lib/openjp2/mqc.c could result in DoS (CVE-2020-27814)\n\n* openjpeg: heap-buffer-overflow write in opj_tcd_dc_level_shift_encode() (CVE-2020-27823)\n\n* openjpeg: heap-buffer-overflow in color.c may lead to DoS or arbitrary code execution (CVE-2021-3575)\n\n* openjpeg: integer overflow in opj_t1_encode_cblks in src/lib/openjp2/t1.c (CVE-2018-5727)\n\n* openjpeg: integer overflow in opj_j2k_setup_encoder function in openjp2/j2k.c (CVE-2018-5785)\n\n* openjpeg: division-by-zero in functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c (CVE-2018-20845)\n\n* openjpeg: integer overflow in function opj_get_encoding_parameters in openjp2/pi.c (CVE-2018-20847)\n\n* openjpeg: denial of service in function opj_t1_encode_cblks in openjp2/t1.c (CVE-2019-12973)\n\n* openjpeg: global-buffer-overflow read in opj_dwt_calc_explicit_stepsizes() (CVE-2020-27824)\n\n* openjpeg: null pointer dereference in opj_tgt_reset function in lib/openjp2/tgt.c (CVE-2020-27842)\n\n* openjpeg: out-of-bounds read in opj_t2_encode_packet function in openjp2/t2.c (CVE-2020-27843)\n\n* openjpeg: heap-based buffer overflow in functions opj_pi_next_rlcp, opj_pi_next_rpcl and opj_pi_next_lrcp in openjp2/pi.c (CVE-2020-27845)\n\n* openjpeg: out-of-bounds write due to an integer overflow in opj_compress.c (CVE-2021-29338)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.5 Release Notes linked from the References section.","status":"published","published":"2021-11-09T08:51:11Z","modified":"2026-02-04T15:30:17.33702Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2020-27845","description":"There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpeg's conversion/encoding functionality, they could cause an out-of-bounds read. The highest impact of this flaw is to application availability.","status":"published","published":"2021-01-05T18:15:00Z","modified":"2026-10-17T12:55:45.496223Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:24.541803Z"},{"id":"ALSA-2021:4251","title":"Moderate: openjpeg2 security update","description":"OpenJPEG is an open source library for reading and writing image files in JPEG2000 format.\n\nThe following packages have been upgraded to a later upstream version: openjpeg2 (2.4.0).\n\nSecurity Fix(es):\n\n* openjpeg: use-after-free and double-free via a mix of valid and invalid files in a directory operated on by the decompressor (CVE-2020-15389)\n\n* openjpeg: heap-buffer-overflow in lib/openjp2/mqc.c could result in DoS (CVE-2020-27814)\n\n* openjpeg: heap-buffer-overflow write in opj_tcd_dc_level_shift_encode() (CVE-2020-27823)\n\n* openjpeg: heap-buffer-overflow in color.c may lead to DoS or arbitrary code execution (CVE-2021-3575)\n\n* openjpeg: integer overflow in opj_t1_encode_cblks in src/lib/openjp2/t1.c (CVE-2018-5727)\n\n* openjpeg: integer overflow in opj_j2k_setup_encoder function in openjp2/j2k.c (CVE-2018-5785)\n\n* openjpeg: division-by-zero in functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c (CVE-2018-20845)\n\n* openjpeg: integer overflow in function opj_get_encoding_parameters in openjp2/pi.c (CVE-2018-20847)\n\n* openjpeg: denial of service in function opj_t1_encode_cblks in openjp2/t1.c (CVE-2019-12973)\n\n* openjpeg: global-buffer-overflow read in opj_dwt_calc_explicit_stepsizes() (CVE-2020-27824)\n\n* openjpeg: null pointer dereference in opj_tgt_reset function in lib/openjp2/tgt.c (CVE-2020-27842)\n\n* openjpeg: out-of-bounds read in opj_t2_encode_packet function in openjp2/t2.c (CVE-2020-27843)\n\n* openjpeg: heap-based buffer overflow in functions opj_pi_next_rlcp, opj_pi_next_rpcl and opj_pi_next_lrcp in openjp2/pi.c (CVE-2020-27845)\n\n* openjpeg: out-of-bounds write due to an integer overflow in opj_compress.c (CVE-2021-29338)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2021-11-09T08:51:11Z","modified":"2026-10-29T11:01:09.348365568Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"DLA-2550-1","title":"openjpeg2 - security update","status":"published","published":"2021-02-09T00:00:00Z","modified":"2026-03-09T01:19:31.946069Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DSA-4882-1","title":"openjpeg2 - security update","status":"published","published":"2021-04-01T00:00:00Z","modified":"2026-03-09T02:09:34.84881Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"MGASA-2020-0478","title":"Updated openjpeg2 packages fix security vulnerabilities","description":"There's a flaw in openjpeg in src/lib/openjp2/pi.c. When an attacker is able to\nprovide crafted input to be processed by the openjpeg encoder, this could cause\nan out-of-bounds read. The greatest impact from this flaw is to application\navailability (CVE-2020-27841).\n\nThere's a flaw in openjpeg's t2 encoder. An attacker who is able to provide\ncrafted input to be processed by openjpeg could cause a null pointer\ndereference. The highest impact of this flaw is to application availability\n(CVE-2020-27842).\n\nA flaw was found in OpenJPEG. This flaw allows an attacker to provide specially\ncrafted input to the conversion or encoding functionality, causing an\nout-of-bounds read. The highest threat from this vulnerability is system\navailability (CVE-2020-27843).\n\nThere's a flaw in  src/lib/openjp2/pi.c of openjpeg. If an attacker is able to\nprovide untrusted input to openjpeg's conversion/encoding functionality, they\ncould cause an out-of-bounds read. The highest impact of this flaw is to\napplication availability (CVE-2020-27845).\n","status":"published","published":"2020-12-29T11:57:17Z","modified":"2026-04-16T04:44:08.001461511Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2024:13571-1","title":"libopenjp2-7-2.5.0-4.1 on GA media","description":"These are all security issues fixed in the libopenjp2-7-2.5.0-4.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:13:42.127645Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"SUSE-SU-2022:3801-1","title":"Security update for openjpeg2","description":"This update for openjpeg2 fixes the following issues:\n\n  - CVE-2018-21010: Fixed heap buffer overflow in color_apply_icc_profile in bin/common/color.c (bsc#1149789).\n  - CVE-2020-27824: Fixed OOB read in opj_dwt_calc_explicit_stepsizes() (bsc#1179821).\n  - CVE-2020-27842: Fixed null pointer dereference in opj_tgt_reset function in lib/openjp2/tgt.c (bsc#1180043).\n  - CVE-2020-27843: Fixed out-of-bounds read in opj_t2_encode_packet function in openjp2/t2.c (bsc#1180044).\n  - CVE-2020-27845: Fixed heap-based buffer over-read in functions opj_pi_next_rlcp, opj_pi_next_rpcl and opj_pi_next_lrcp in openjp2/pi.c (bsc#1180046).\n","status":"published","published":"2022-10-27T14:24:21Z","modified":"2026-02-04T02:51:43.294503Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2022:3802-1","title":"Security update for openjpeg2","description":"This update for openjpeg2 fixes the following issues:\n\n  - CVE-2018-20846: Fixed OOB read in pi_next_lrcp, pi_next_rlcp, pi_next_rpcl, pi_next_pcrl, pi_next_rpcl, and pi_next_cprl in openmj2/pi.c (bsc#1140205).\n  - CVE-2018-21010: Fixed heap buffer overflow in color_apply_icc_profile in bin/common/color.c (bsc#1149789).\n  - CVE-2020-27814: Fixed heap buffer overflow in lib/openjp2/mqc.c (bsc#1179594),\n  - CVE-2020-27824: Fixed OOB read in opj_dwt_calc_explicit_stepsizes() (bsc#1179821).\n  - CVE-2020-27841: Fixed buffer over-read in lib/openjp2/pi.c (bsc#1180042).\n  - CVE-2020-27842: Fixed null pointer dereference in opj_tgt_reset function in lib/openjp2/tgt.c (bsc#1180043).\n  - CVE-2020-27843: Fixed OOB read in opj_t2_encode_packet function in openjp2/t2.c (bsc#1180044).\n  - CVE-2020-27845: Fixed heap-based buffer over-read in functions opj_pi_next_rlcp, opj_pi_next_rpcl and opj_pi_next_lrcp in openjp2/pi.c (bsc#1180046).\n","status":"published","published":"2022-10-27T14:27:02Z","modified":"2026-02-04T04:02:03.325959Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2022:4082-1","title":"Security update for openjpeg","description":"This update for openjpeg fixes the following issues:\n\n-  CVE-2018-20846: Fixed an Out-of-bounds accesses in pi_next_lrcp, pi_next_rlcp, pi_next_rpcl, pi_next_pcrl, pi_next_rpcl, and pi_next_cprl in openmj2/pi.  (bsc#1140205)\n-  CVE-2018-21010: Fixed a heap buffer overflow in color_apply_icc_profile in bin/common/color.c  (bsc#1149789)\n-  CVE-2020-27824: Fixed an OOB read in opj_dwt_calc_explicit_stepsizes() (bsc#1179821)\n-  CVE-2020-27842: Fixed null pointer dereference in opj_tgt_reset function in lib/openjp2/tgt.c (bsc#1180043)\n-  CVE-2020-27843: Fixed an out-of-bounds read in opj_t2_encode_packet function in openjp2/t2.c (bsc#1180044)\n-  CVE-2020-27845: Fixed a heap-based buffer over-read in functions opj_pi_next_rlcp, opj_pi_next_rpcl and opj_pi_next_lrcp in openjp2/pi.c (bsc#1180046)\n","status":"published","published":"2022-11-18T14:44:55Z","modified":"2026-02-04T03:05:22.669102Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"USN-4685-1","title":"openjpeg2 vulnerabilities","description":"It was discovered that OpenJPEG incorrectly handled certain image data. An\nattacker could use this issue to cause OpenJPEG to crash, leading to a\ndenial of service, or possibly execute arbitrary code.\n","status":"published","published":"2021-01-07T13:59:57Z","modified":"2026-04-27T15:48:47.014783066Z","updated_at":"2026-11-02T16:58:15.159055Z"},{"id":"USN-4686-1","title":"ghostscript vulnerabilities","description":"It was discovered that Ghostscript incorrectly handled certain image\nfiles. If a user or automated system were tricked into processing a\nspecially crafted file, a remote attacker could use this issue to cause\nGhostscript to crash, resulting in a denial of service, or possibly\nexecute arbitrary code.\n","status":"published","published":"2021-01-07T14:10:16Z","modified":"2026-04-27T16:03:35.001338378Z","updated_at":"2026-11-02T16:58:15.159055Z"},{"id":"USN-4880-1","title":"openjpeg2 vulnerabilities","description":"It was discovered that OpenJPEG incorrectly handled certain image data. An\nattacker could use this issue to cause OpenJPEG to crash, leading to a\ndenial of service, or possibly execute arbitrary code.\n","status":"published","published":"2021-03-16T10:32:18Z","modified":"2026-04-27T15:50:30.348157Z","updated_at":"2026-11-02T16:58:15.159055Z"},{"id":"USN-5952-1","title":"openjpeg2 vulnerabilities","description":"Sebastian Poeplau discovered that OpenJPEG incorrectly handled certain inputs.\nIf a user or an automated system were tricked into opening a specially crafted\ninput file, a remote attacker could possibly use this issue to cause a denial\nof service or execute arbitrary code. This issue only affected Ubuntu 18.04\nLTS. (CVE-2020-6851, CVE-2020-8112)\n\nIt was discovered that OpenJPEG incorrectly handled certain inputs. If a user\nor an automated system were tricked into opening a specially crafted input\nfile, a remote attacker could possibly use this issue to cause a denial of\nservice or execute arbitrary code. This issue only affected Ubuntu 18.04 LTS.\n(CVE-2020-15389, CVE-2020-27814, CVE-2020-27823, CVE-2020-27824,\nCVE-2020-27841, CVE-2020-27845)\n\nIt was discovered that OpenJPEG incorrectly handled certain inputs. If a user\nor an automated system were tricked into opening a specially crafted input\nfile, a remote attacker could possibly use this issue to cause a denial of\nservice. (CVE-2020-27842, CVE-2020-27843)\n","status":"published","published":"2023-03-15T11:56:14Z","modified":"2026-06-25T13:31:53.102876445Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}