{"id":"CVE-2020-6851","aliases":["ALPINE-CVE-2020-6851","BELL-CVE-2020-6851","DEBIAN-CVE-2020-6851","DLA-2081-1","DLA-2277-1","DSA-4882-1","EUVD-2020-27994","GHSA-6gvh-974v-q8vj","JLSEC-2026-543","MGASA-2020-0071","OESA-2021-1234","RHSA-2020:0262","RHSA-2020:0274","RHSA-2020:0296","SUSE-SU-2022:1252-1","SUSE-SU-2026:24205-1","SUSE-SU-2026:4378-1","UBUNTU-CVE-2020-6851","USN-4497-1","USN-4686-1","USN-5952-1","openSUSE-SU-2024:11120-1","openSUSE-SU-2026:11859-1","openSUSE-SU-2026:22052-1"],"status":"published","title":"OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in...","description":"OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.05285,"percentile":0.92638,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2020-01-13T05:02:35Z","modified":"2026-10-26T12:02:33Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"openjpeg","fixed_in":["2.3.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"openjpeg","fixed_in":["2.3.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"openjpeg","fixed_in":["2.3.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"openjpeg","fixed_in":["2.3.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"openjpeg","fixed_in":["2.3.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"openjpeg","fixed_in":["2.3.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"openjpeg","fixed_in":["2.3.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"openjpeg","fixed_in":["2.3.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"openjpeg","fixed_in":["2.3.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"openjpeg","fixed_in":["2.3.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"openjpeg","fixed_in":["2.3.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"openjpeg","fixed_in":["2.3.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"openjpeg","fixed_in":["2.3.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openjpeg","fixed_in":["2.3.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openjpeg","fixed_in":["2.3.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"openjpeg","fixed_in":["2.3.0-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"openjpeg","fixed_in":["2.3.0-r5"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"openjpeg2","fixed_in":["2.4.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openjpeg2","fixed_in":["2.4.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openjpeg2","fixed_in":["2.4.0-1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"openjpeg2","fixed_in":["2.1.0-2+deb8u9"],"sources":["osv"]},{"ecosystem":"Julia","package":"OpenJpeg_jll","fixed_in":["2.4.0+0"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"openjpeg2","fixed_in":["2.3.1-1.2.mga7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"openjpeg2","fixed_in":["0:2.3.1-2.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"openjpeg2-debuginfo","fixed_in":["0:2.3.1-2.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"openjpeg2-devel","fixed_in":["0:2.3.1-2.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"openjpeg2-devel-docs","fixed_in":["0:2.3.1-2.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"openjpeg2-tools","fixed_in":["0:2.3.1-2.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openjpeg2","fixed_in":["0:2.3.1-2.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openjpeg2-debuginfo","fixed_in":["0:2.3.1-2.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openjpeg2-devel","fixed_in":["0:2.3.1-2.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openjpeg2-devel-docs","fixed_in":["0:2.3.1-2.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openjpeg2-tools","fixed_in":["0:2.3.1-2.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"openjpeg2","fixed_in":["0:2.3.1-2.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"openjpeg2-debuginfo","fixed_in":["0:2.3.1-2.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"openjpeg2-devel","fixed_in":["0:2.3.1-2.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"openjpeg2-devel-docs","fixed_in":["0:2.3.1-2.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"openjpeg2-tools","fixed_in":["0:2.3.1-2.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openjpeg2","fixed_in":["0:2.3.1-2.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openjpeg2-debuginfo","fixed_in":["0:2.3.1-2.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openjpeg2-devel","fixed_in":["0:2.3.1-2.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openjpeg2-devel-docs","fixed_in":["0:2.3.1-2.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openjpeg2-tools","fixed_in":["0:2.3.1-2.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openjpeg2","fixed_in":["0:2.3.1-2.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openjpeg2-debuginfo","fixed_in":["0:2.3.1-2.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openjpeg2-debugsource","fixed_in":["0:2.3.1-2.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openjpeg2-devel-docs","fixed_in":["0:2.3.1-2.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openjpeg2-tools","fixed_in":["0:2.3.1-2.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openjpeg2-tools-debuginfo","fixed_in":["0:2.3.1-2.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openjpeg2-debuginfo","fixed_in":["0:2.3.1-2.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openjpeg2-debugsource","fixed_in":["0:2.3.1-2.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openjpeg2-devel","fixed_in":["0:2.3.1-2.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openjpeg2-tools","fixed_in":["0:2.3.1-2.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openjpeg2-tools-debuginfo","fixed_in":["0:2.3.1-2.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"openjpeg2","fixed_in":["0:2.3.0-9.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"openjpeg2-debuginfo","fixed_in":["0:2.3.0-9.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"openjpeg2-debugsource","fixed_in":["0:2.3.0-9.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"openjpeg2-devel-docs","fixed_in":["0:2.3.0-9.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"openjpeg2-tools","fixed_in":["0:2.3.0-9.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"openjpeg2-tools-debuginfo","fixed_in":["0:2.3.0-9.el8_0"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"libheif","fixed_in":["1.23.5-150700.3.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"libheif","fixed_in":["1.23.5-150700.3.24.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"ghostscript","fixed_in":["9.26~dfsg+0-0ubuntu0.16.04.14"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"openjpeg2","fixed_in":["2.1.2-1.1+deb9u5build0.16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"ghostscript","fixed_in":["9.26~dfsg+0-0ubuntu0.18.04.14"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"openjpeg2","fixed_in":["2.3.0-2+deb10u2build0.18.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"openjpeg2","fixed_in":["2.3.1-1ubuntu4"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"libheif","fixed_in":["1.23.5-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-r5"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-2+deb8u9"}]}],"versions":["2.1.0-2","2.1.0-2+deb8u1","2.1.0-2+deb8u2","2.1.0-2+deb8u3","2.1.0-2+deb8u4","2.1.0-2+deb8u5","2.1.0-2+deb8u6","2.1.0-2+deb8u7","2.1.0-2+deb8u8"]},{"source":"osv","ecosystem":"Debian:9","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-1.1+deb9u5"}]}],"versions":["2.1.2-1.1","2.1.2-1.1+deb9u1","2.1.2-1.1+deb9u2","2.1.2-1.1+deb9u3","2.1.2-1.1+deb9u4"],"bundled":4},{"source":"osv","ecosystem":"Debian:10","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-2+deb10u2"}]}],"versions":["2.3.0-2","2.3.0-2+deb10u1"],"bundled":10},{"source":"osv","ecosystem":"Julia","package":"OpenJpeg_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.4.0+0"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-1.2.mga7"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-6.oe1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-2.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openjpeg2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-2.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openjpeg2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-2.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openjpeg2-devel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-2.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openjpeg2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-2.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-2.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openjpeg2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-2.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openjpeg2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-2.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openjpeg2-devel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-2.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openjpeg2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-2.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-2.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openjpeg2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-2.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openjpeg2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-2.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openjpeg2-devel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-2.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openjpeg2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-2.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-2.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openjpeg2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-2.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openjpeg2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-2.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openjpeg2-devel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-2.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openjpeg2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-2.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-2.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openjpeg2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-2.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openjpeg2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-2.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openjpeg2-devel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-2.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openjpeg2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-2.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openjpeg2-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-2.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openjpeg2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-2.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openjpeg2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-2.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openjpeg2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-2.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openjpeg2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-2.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openjpeg2-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-2.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-9.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"openjpeg2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-9.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"openjpeg2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-9.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"openjpeg2-devel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-9.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"openjpeg2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-9.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"openjpeg2-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-9.el8_0"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP3","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"libheif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.5-160000.1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"libheif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.5-160000.1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"libheif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.5-150700.3.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"libheif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.5-150700.3.24.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.26~dfsg+0-0ubuntu0.16.04.14"}]}],"versions":["9.16~dfsg~0-0ubuntu3","9.16~dfsg~0-0ubuntu4","9.18~dfsg~0-0ubuntu1","9.18~dfsg~0-0ubuntu2","9.18~dfsg~0-0ubuntu2.2","9.18~dfsg~0-0ubuntu2.3","9.18~dfsg~0-0ubuntu2.4","9.18~dfsg~0-0ubuntu2.6","9.18~dfsg~0-0ubuntu2.7","9.18~dfsg~0-0ubuntu2.8","9.18~dfsg~0-0ubuntu2.9","9.25~dfsg+1-0ubuntu0.16.04.1","9.25~dfsg+1-0ubuntu0.16.04.2","9.25~dfsg+1-0ubuntu0.16.04.3","9.26~dfsg+0-0ubuntu0.16.04.1","9.26~dfsg+0-0ubuntu0.16.04.3","9.26~dfsg+0-0ubuntu0.16.04.4","9.26~dfsg+0-0ubuntu0.16.04.5","9.26~dfsg+0-0ubuntu0.16.04.6","9.26~dfsg+0-0ubuntu0.16.04.7","9.26~dfsg+0-0ubuntu0.16.04.8","9.26~dfsg+0-0ubuntu0.16.04.9","9.26~dfsg+0-0ubuntu0.16.04.10","9.26~dfsg+0-0ubuntu0.16.04.11","9.26~dfsg+0-0ubuntu0.16.04.12","9.26~dfsg+0-0ubuntu0.16.04.13"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-1.1+deb9u5build0.16.04.1"}]}],"versions":["2.1.0-2.1","2.1.0-2.1ubuntu0.1","2.1.2-1.1+deb9u2build0.1","2.1.2-1.1+deb9u3build0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.74+dfsg0-4build2","2.75.a+dfsg0-2ubuntu2","2.75.a+dfsg0-2ubuntu3","2.76.b+dfsg0-3","2.76.b+dfsg0-3build1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"insighttoolkit4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.8.1-1ubuntu3","4.8.1-1ubuntu4","4.8.2-3.1ubuntu1","4.9.0-3ubuntu2","4.9.0-4ubuntu1","4.9.0-4ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.4.1-1","4.4.1-1.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.26~dfsg+0-0ubuntu0.18.04.14"}]}],"versions":["9.21~dfsg+1-0ubuntu3","9.22~dfsg+1-0ubuntu1","9.22~dfsg+1-0ubuntu1.1","9.22~dfsg+1-0ubuntu1.2","9.25~dfsg+1-0ubuntu0.18.04.1","9.25~dfsg+1-0ubuntu0.18.04.2","9.26~dfsg+0-0ubuntu0.18.04.1","9.26~dfsg+0-0ubuntu0.18.04.3","9.26~dfsg+0-0ubuntu0.18.04.4","9.26~dfsg+0-0ubuntu0.18.04.5","9.26~dfsg+0-0ubuntu0.18.04.6","9.26~dfsg+0-0ubuntu0.18.04.7","9.26~dfsg+0-0ubuntu0.18.04.8","9.26~dfsg+0-0ubuntu0.18.04.9","9.26~dfsg+0-0ubuntu0.18.04.10","9.26~dfsg+0-0ubuntu0.18.04.11","9.26~dfsg+0-0ubuntu0.18.04.12","9.26~dfsg+0-0ubuntu0.18.04.13"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-2+deb10u2build0.18.04.1"}]}],"versions":["2.2.0-1","2.3.0-1","2.3.0-2build0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.78.c+dfsg0-2build1","2.79+dfsg0-2build1","2.79+dfsg0-3","2.79+dfsg0-3build1","2.79.b+dfsg0-1","2.79.b+dfsg0-1ubuntu1.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"insighttoolkit4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.12.2-dfsg1-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.9.1+dfsg-4","5.9.1+dfsg-4ubuntu1","5.9.2+dfsg-2ubuntu1","5.9.3+dfsg-0ubuntu1","5.9.4+dfsg-0ubuntu1","5.9.5+dfsg-0ubuntu2","5.9.5+dfsg-0ubuntu2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.5-1","5.0.2-1","5.0.2-1build1","5.0.2-1build2","5.0.2-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-1ubuntu4"}]}],"versions":["2.3.0-2","2.3.0-2build1","2.3.1-1","2.3.1-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.80+dfsg-3","2.80+dfsg-3build1","2.80+dfsg-4","2.81.a+dfsg-5build3","2.82+dfsg-1","2.82+dfsg-1build1","2.82.a+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"insighttoolkit4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.12.2-dfsg1-4.1ubuntu1","4.13.2-dfsg1-1ubuntu1","4.13.2-dfsg1-4ubuntu1","4.13.2-dfsg1-6","4.13.2-dfsg1-6ubuntu1","4.13.2-dfsg1-8"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.12.4+dfsg-1ubuntu1","5.12.4+dfsg-1ubuntu3","5.12.5+dfsg-3ubuntu1","5.12.5+dfsg-6ubuntu2","5.12.5+dfsg-7","5.12.5+dfsg-7build1","5.12.8+dfsg-0ubuntu1","5.12.8+dfsg-0ubuntu1.1","5.12.8+dfsg-0ubuntu1.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.3-1build2","5.0.3-1build3","5.0.3-1build4","5.0.3-1build5","5.0.3-1ubuntu0.20.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.93.3+dfsg-3","2.93.5+dfsg-1","2.93.5+dfsg-1build1","3.0.1+dfsg-7"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"insighttoolkit4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.13.3withdata-dfsg1-4.1","4.13.3withdata-dfsg2-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.6+dfsg-1","5.15.6+dfsg-2","5.15.7+dfsg-2","5.15.8+dfsg-1","5.15.8+dfsg-1build1","5.15.8+dfsg-1build2","5.15.8+dfsg-2","5.15.9+dfsg-1","5.15.9+dfsg-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.3-1build8","5.0.3-1build9","5.0.3-1ubuntu0.22.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.6.2+dfsg-2ubuntu1","3.6.2+dfsg-2ubuntu2","4.0.2+dfsg-1ubuntu1","4.0.2+dfsg-1ubuntu2","4.0.2+dfsg-1ubuntu4","4.0.2+dfsg-1ubuntu6","4.0.2+dfsg-1ubuntu7","4.0.2+dfsg-1ubuntu8"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.15+dfsg-2","5.15.15+dfsg-2build2","5.15.15+dfsg-2ubuntu1","5.15.16+dfsg-1","5.15.16+dfsg-1ubuntu2","5.15.16+dfsg-1ubuntu4","5.15.16+dfsg-3","5.15.16+dfsg-3ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.1.3+dfsg-1build4","5.1.3+dfsg-1build5","5.1.3+dfsg-1build6","5.1.3+dfsg-1build7","5.1.3+dfsg-1build8","5.1.3+dfsg-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.2+dfsg-2","4.3.2+dfsg-2ubuntu1","4.3.2+dfsg-2ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.18+dfsg-2","5.15.18+dfsg-2build1","5.15.19+dfsg-1","5.15.19+dfsg2-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.1.3+dfsg-3","5.1.3+dfsg-3build1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.1+dfsg-1ubuntu1","5.0.1+dfsg-1ubuntu3","5.0.1+dfsg-3build1","5.0.1+dfsg-5"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.19+dfsg2-4","5.15.19+dfsg2-6","5.15.19+dfsg2-7"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.0.1+dfsg-3build1","6.0.1+dfsg-3build2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.2+dfsg-2ubuntu2","5.0.1+dfsg-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.1.3+dfsg-3build1","6.0.1+dfsg-3","6.0.1+dfsg-3build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:26.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.19+dfsg2-1","5.15.19+dfsg2-1build1","5.15.19+dfsg2-2","5.15.19+dfsg2-3","5.15.19+dfsg2-4","5.15.19+dfsg2-4ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-1.1+deb9u5build0.16.04.1"}]}],"versions":["2.1.0-2.1","2.1.0-2.1ubuntu0.1","2.1.2-1.1+deb9u2build0.1","2.1.2-1.1+deb9u3build0.16.04.1"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.26~dfsg+0-0ubuntu0.16.04.14"}]}],"versions":["9.16~dfsg~0-0ubuntu3","9.16~dfsg~0-0ubuntu4","9.18~dfsg~0-0ubuntu1","9.18~dfsg~0-0ubuntu2","9.18~dfsg~0-0ubuntu2.2","9.18~dfsg~0-0ubuntu2.3","9.18~dfsg~0-0ubuntu2.4","9.18~dfsg~0-0ubuntu2.6","9.18~dfsg~0-0ubuntu2.7","9.18~dfsg~0-0ubuntu2.8","9.18~dfsg~0-0ubuntu2.9","9.25~dfsg+1-0ubuntu0.16.04.1","9.25~dfsg+1-0ubuntu0.16.04.2","9.25~dfsg+1-0ubuntu0.16.04.3","9.26~dfsg+0-0ubuntu0.16.04.1","9.26~dfsg+0-0ubuntu0.16.04.3","9.26~dfsg+0-0ubuntu0.16.04.4","9.26~dfsg+0-0ubuntu0.16.04.5","9.26~dfsg+0-0ubuntu0.16.04.6","9.26~dfsg+0-0ubuntu0.16.04.7","9.26~dfsg+0-0ubuntu0.16.04.8","9.26~dfsg+0-0ubuntu0.16.04.9","9.26~dfsg+0-0ubuntu0.16.04.10","9.26~dfsg+0-0ubuntu0.16.04.11","9.26~dfsg+0-0ubuntu0.16.04.12","9.26~dfsg+0-0ubuntu0.16.04.13"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.26~dfsg+0-0ubuntu0.18.04.14"}]}],"versions":["9.21~dfsg+1-0ubuntu3","9.22~dfsg+1-0ubuntu1","9.22~dfsg+1-0ubuntu1.1","9.22~dfsg+1-0ubuntu1.2","9.25~dfsg+1-0ubuntu0.18.04.1","9.25~dfsg+1-0ubuntu0.18.04.2","9.26~dfsg+0-0ubuntu0.18.04.1","9.26~dfsg+0-0ubuntu0.18.04.3","9.26~dfsg+0-0ubuntu0.18.04.4","9.26~dfsg+0-0ubuntu0.18.04.5","9.26~dfsg+0-0ubuntu0.18.04.6","9.26~dfsg+0-0ubuntu0.18.04.7","9.26~dfsg+0-0ubuntu0.18.04.8","9.26~dfsg+0-0ubuntu0.18.04.9","9.26~dfsg+0-0ubuntu0.18.04.10","9.26~dfsg+0-0ubuntu0.18.04.11","9.26~dfsg+0-0ubuntu0.18.04.12","9.26~dfsg+0-0ubuntu0.18.04.13"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-1.1+deb9u6ubuntu0.1~esm3"}]}],"versions":["2.1.0-2.1","2.1.0-2.1ubuntu0.1","2.1.2-1.1+deb9u2build0.1","2.1.2-1.1+deb9u3build0.16.04.1","2.1.2-1.1+deb9u3ubuntu0.1~esm1","2.1.2-1.1+deb9u5build0.16.04.1","2.1.2-1.1+deb9u5ubuntu0.1~esm1","2.1.2-1.1+deb9u6build0.16.04.1","2.1.2-1.1+deb9u6ubuntu0.1~esm1"],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-2+deb10u2build0.18.04.1"}]}],"versions":["2.2.0-1","2.3.0-1","2.3.0-2build0.18.04.1"],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libheif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.5-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"libheif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.5-160000.1.1"}]}],"bundled":2}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"oracle","product":"georaster"},{"vendor":"oracle","product":"outside_in_technology"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_eus"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_server_aus"},{"vendor":"redhat","product":"enterprise_linux_server_tus"},{"vendor":"redhat","product":"enterprise_linux_workstation"},{"vendor":"uclouvain","product":"openjpeg"}],"references":[{"url":"https://lists.debian.org/debian-lts-announce/2020/01/msg00025.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0262","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0274","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0296","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XBRMI2D3XPVWKE3V52KRBW7BJVLS5LD3/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LACIIDDCKZJEPKTTFILSOSBQL7L3FC6V/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/07/msg00008.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://github.com/uclouvain/openjpeg/issues/1228","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","web"]},{"url":"https://www.debian.org/security/2021/dsa-4882","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://www.openwall.com/lists/oss-security/2026/09/22/6","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-6851","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LACIIDDCKZJEPKTTFILSOSBQL7L3FC6V"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XBRMI2D3XPVWKE3V52KRBW7BJVLS5LD3"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LACIIDDCKZJEPKTTFILSOSBQL7L3FC6V"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XBRMI2D3XPVWKE3V52KRBW7BJVLS5LD3"},{"url":"https://github.com/advisories/GHSA-6gvh-974v-q8vj"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-6851","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2020-6851","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-6851","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0071.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=26141","tags":["report"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1234","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27823","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27824","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8112","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1790511","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0262.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-6851","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-6851","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0274.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0296.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221252-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1076314","tags":["report"]},{"url":"https://bugzilla.suse.com/1076967","tags":["report"]},{"url":"https://bugzilla.suse.com/1079845","tags":["report"]},{"url":"https://bugzilla.suse.com/1102016","tags":["report"]},{"url":"https://bugzilla.suse.com/1106881","tags":["report"]},{"url":"https://bugzilla.suse.com/1106882","tags":["report"]},{"url":"https://bugzilla.suse.com/1140130","tags":["report"]},{"url":"https://bugzilla.suse.com/1160782","tags":["report"]},{"url":"https://bugzilla.suse.com/1162090","tags":["report"]},{"url":"https://bugzilla.suse.com/1173578","tags":["report"]},{"url":"https://bugzilla.suse.com/1180457","tags":["report"]},{"url":"https://bugzilla.suse.com/1184774","tags":["report"]},{"url":"https://bugzilla.suse.com/1197738","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5727","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-6616","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1122","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624205-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1281829","tags":["report"]},{"url":"https://bugzilla.suse.com/1281948","tags":["report"]},{"url":"https://bugzilla.suse.com/1281949","tags":["report"]},{"url":"https://bugzilla.suse.com/1281950","tags":["report"]},{"url":"https://bugzilla.suse.com/1281951","tags":["report"]},{"url":"https://bugzilla.suse.com/1281952","tags":["report"]},{"url":"https://bugzilla.suse.com/1281953","tags":["report"]},{"url":"https://bugzilla.suse.com/1281954","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84449","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264378-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-6851","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4686-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4497-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5952-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-9112","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-20847","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-21010","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-12973","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-8112","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-15389","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5727","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27814","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27824","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27841","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27842","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27843","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27845","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27823","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8332","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12982","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14040","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14151","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7648","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12973","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-6851","description":"OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation.","status":"published","published":"2020-01-13T05:02:35Z","modified":"2026-09-22T17:07:24.725Z","updated_at":"2026-11-02T14:35:52.592504Z"}],"euvd":[{"id":"EUVD-2020-27994","description":"OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation.","status":"published","published":"2020-01-13T05:02:35Z","modified":"2026-09-22T17:07:24Z","updated_at":"2026-11-02T17:28:02.601428Z"}],"ghsa":[{"id":"GHSA-6gvh-974v-q8vj","title":"OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in...","description":"OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in libopenjp2.so.","status":"published","published":"2022-05-24T17:06:07Z","modified":"2026-09-22T18:33:01Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T15:12:17.909941Z"}],"nvd":[{"id":"CVE-2020-6851","description":"OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation.","status":"published","published":"2020-01-13T06:15:10.957Z","modified":"2026-09-22T18:17:08.367Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:05:52.385274Z"}],"osv":[{"id":"ALPINE-CVE-2020-6851","description":"OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation.","status":"published","published":"2020-01-13T06:15:10.957Z","modified":"2026-10-26T11:17:55.179988291Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:48.11886Z"},{"id":"BELL-CVE-2020-6851","title":"CVE-2020-6851 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:13.522666Z","modified":"2026-01-26T09:49:32.087448Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:15.925958Z"},{"id":"CVE-2020-6851","description":"OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation.","status":"published","published":"2020-01-13T06:15:10.957Z","modified":"2026-10-21T17:42:36.816247046Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:17.34531Z"},{"id":"DEBIAN-CVE-2020-6851","description":"OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation.","status":"published","published":"2020-01-13T06:15:10.957Z","modified":"2026-10-26T12:02:33.115862237Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:34.311861Z"},{"id":"JLSEC-2026-543","description":"OpenJPEG through 2.3.1 has a heap-based buffer overflow in `opj_t1_clbl_decode_processor` in `openjp2/t1.c` because of lack of `opj_j2k_update_image_dimensions` validation.","status":"published","published":"2026-05-26T19:31:24.313Z","modified":"2026-07-25T18:24:37.067072962Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:18.573531Z"},{"id":"OESA-2021-1234","title":"openjpeg2 security update","description":"OpenJPEG is an open-source JPEG 2000 codec written in C language. It has been developed in order to promote the use of JPEG 2000, a still-image compression standard from the Joint Photographic Experts Group (JPEG). Since April 2015, it is officially recognized by ISO/IEC and ITU-T as a JPEG 2000 Reference Software.\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during encoding. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.(CVE-2020-27823)\r\n\r\nA flaw was found in OpenJPEG’s encoder in the opj_dwt_calc_explicit_stepsizes() function. This flaw allows an attacker who can supply crafted input to decomposition levels to cause a buffer overflow. The highest threat from this vulnerability is to system availability.(CVE-2020-27824)\r\n\r\nopj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851.(CVE-2020-8112)\n\nAOpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation.(CVE-2020-6851)","status":"published","published":"2021-06-22T11:04:28Z","modified":"2026-08-18T01:15:43.759224743Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2020:0262","title":"Red Hat Security Advisory: openjpeg2 security update","status":"published","published":"2024-09-16T03:27:31Z","modified":"2026-09-23T10:01:15Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:0274","title":"Red Hat Security Advisory: openjpeg2 security update","status":"published","published":"2024-09-16T03:27:39Z","modified":"2026-09-23T10:01:16Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:0296","title":"Red Hat Security Advisory: openjpeg2 security update","status":"published","published":"2024-09-16T03:27:47Z","modified":"2026-09-23T10:01:17Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"UBUNTU-CVE-2020-6851","description":"OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation.","status":"published","published":"2020-01-13T06:15:00Z","modified":"2026-10-17T12:56:56.709688083Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:25.728622Z"},{"id":"DLA-2081-1","title":"openjpeg2 - security update","status":"published","published":"2020-01-28T00:00:00Z","modified":"2026-03-09T01:20:16.25491Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DLA-2277-1","title":"openjpeg2 - security update","status":"published","published":"2020-07-11T00:00:00Z","modified":"2026-03-09T01:21:46.20254Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DSA-4882-1","title":"openjpeg2 - security update","status":"published","published":"2021-04-01T00:00:00Z","modified":"2026-03-09T02:09:34.84881Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"MGASA-2020-0071","title":"Updated openjpeg2 packages fix security vulnerability","description":"Updated openjpeg2 packages fix security vulnerability:\n\nOpenJPEG through 2.3.1 has a heap-based buffer overflow in\nopj_t1_clbl_decode_processor in libopenjp2.so (CVE-2020-6851).\n","status":"published","published":"2020-01-30T18:28:34Z","modified":"2026-04-16T04:44:00.939869283Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2024:11120-1","title":"libopenjp2-7-2.4.0-1.4 on GA media","description":"These are all security issues fixed in the libopenjp2-7-2.4.0-1.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:39:34.719167Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2026:11859-1","title":"gdk-pixbuf-loader-libheif-1.23.5-1.1 on GA media","description":"These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.23.5-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-09-23T00:00:00Z","modified":"2026-09-24T18:23:14.533959341Z","updated_at":"2026-11-02T16:58:40.245664Z"},{"id":"openSUSE-SU-2026:22052-1","title":"Security update for libheif","description":"This update for libheif fixes the following issues:\n\n- CVE-2026-84449: hOp_RGB24_32_to_YCbCr Memory Access Error / SEGV (bsc#1281829).\n- AV1/libaom path allows allocation before libheif rejects mismatched coded dimensions (bsc#1281953).\n- Caller-configured security limits not enforced for MINI-box parsing (bsc#1281952).\n- Heap out-of-bounds read in libheif alpha compositing via mismatched per-channel bit depths (bsc#1281951).\n- Heap-use-after-free and double free in ImageItem::encode_to_bitstream_and_boxes (bsc#1281949).\n- Incomplete OpenJPEG pre-decode security limits allow unsafe decode through the public API (bsc#1281954).\n- JPEG 2000 pclr zero-column allocation amplification bypasses max_total_memory (bsc#1281950).\n- Out-of-bounds heap read in unc_encoder_rgb_pixel_interleave (bsc#1281948).\n\nChanges for libheif:\n\n- update to 1.23.5:\n * (GHSA-v8qw-hwjv-44hw) Memory exhaustion\n through a mismatch between the container and the bitstream\n image size. A crafted image can declare a small size in its\n ispe property while the bitstream declares a much larger\n coded frame. The container-level checks used the ispe size,\n so the oversized bitstream reached the decoder, which\n allocated a frame buffer for the in-band size before libheif\n rejected the mismatch. The advisory demonstrated this for AV1\n with the libaom backend (a 351-byte AVIF declaring 64x64 but\n coding up to 27648x27648, allocating hundreds of MB to more\n than 10 GB), but the same class affects every codec whose\n real frame size lives in the bitstream. The coded size is now\n checked against max_image_size_pixels in the codec-\n independent decode path, before any bytes reach a decoder\n plugin: all AV1 sequence headers, all HEVC/AVC/VVC SPS NAL\n units (including those carried in the item data, not only the\n ones in the configuration record), the JPEG SOF marker and\n the JPEG 2000 SIZ reference grid are scanned for the largest\n coded size. (high)\n * (GHSA-qwpf-5wf7-r996) Heap use-after-free and\n double free when encoding an image that carries a TAI\n timestamp, including transcoding a file with an itai\n property. ImageDescription shallow-copied its raw\n heif_tai_timestamp_packet pointer, and a temporary in\n ImageItem::encode_to_bitstream_and_boxes() freed the packet\n while the item and the source image still held it. The\n timestamp is now stored by value. (medium)\n * (GHSA-9c75-9g8r-4728) Memory amplification\n through a JPEG 2000 pclr box declaring zero palette columns.\n The entry-count bound was skipped for zero columns, so an\n 11-byte box allocated 65,535 empty palette entries, and\n nested j2kH containers could repeat this within the child and\n nesting limits: a 3 KB file reached about 330 MB RSS, none of\n it charged to max_total_memory. Zero columns are rejected\n (ISO/IEC 15444-1 requires 1 to 255), the byte bound is\n unconditional, and the palette storage is charged to the\n memory limits. (medium)\n * (GHSA-r7gr-2xm2-23wf) Heap out-of-bounds read\n in alpha compositing for uncompressed (unci) images whose\n colour planes have different bit depths.\n Op_flatten_alpha_plane read every plane through the sample\n type of the first colour plane, so an 8-bit blue plane next\n to 16-bit red and green planes was read with a halved stride\n past its end, and the bytes ended up in the composited\n output. ColorState now tracks one bit depth per plane, and\n the operator declines mixed sample widths at planning time.\n (medium)\n * (GHSA-q492-cfcm-895h) The OpenJPEG decoder\n plugin's pre-decode size check bounded the JPEG 2000 window\n span (x1-x0)*(y1-y0) but not the absolute reference-grid\n coordinates, so a codestream with a 17-pixel window on a grid\n near the 32-bit boundary reached opj_decode(). Against\n OpenJPEG 2.3.1 this produced a heap-buffer-overflow write\n inside OpenJPEG (the class of CVE-2020-6851); OpenJPEG 2.5.4\n rejects the input. The reference-grid area is now bounded as\n well. (low)\n * (GHSA-qfj5-c4pq-q998) Heap out-of-bounds read in the\n uncompressed encoder when an application attached a separate\n alpha plane to an image with an interleaved chroma format.\n The interleaved encoders took their component list from the\n chroma format (three entries) but decided whether to write\n alpha from the presence of an alpha plane, and indexed the\n list at [3]. heif_image_add_plane() now rejects a separate\n alpha plane on interleaved images, and the encoders derive\n both decisions from the chroma format. Only reachable through\n the public API; decoding never produces such an image. (low)\n * (GHSA-7pwf-qh74-p35w) The caller's heif_security_limits were\n not applied when parsing a mini box (the MIAF minimized image\n format) or the av1C/hvcC blob embedded in it; the built-in\n defaults were used instead. An application that tightened the\n limits got no enforcement of its max_memory_block_size or\n max_total_memory on such files. The allocations are bounded\n by the bytes present in the box, so this could not amplify\n memory use. (low)\n","status":"published","published":"2026-10-08T06:18:28Z","modified":"2026-10-19T17:23:10.645008563Z","updated_at":"2026-11-02T16:58:42.426393Z"},{"id":"SUSE-SU-2022:1252-1","title":"Security update for openjpeg2","description":"This update for openjpeg2 fixes the following issues:\n\n- CVE-2018-5727: Fixed integer overflow vulnerability in theopj_t1_encode_cblks function (bsc#1076314).\n- CVE-2018-5785: Fixed integer overflow caused by an out-of-bounds leftshift in the opj_j2k_setup_encoder function (bsc#1076967).\n- CVE-2018-6616: Fixed excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c (bsc#1079845).\n- CVE-2018-14423: Fixed division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl,and pi_next_rpcl in lib/openjp3d/pi.c (bsc#1102016).\n- CVE-2018-16375: Fixed missing checks for header_info.height and header_info.width in the function pnmtoimage in bin/jpwl/convert.c (bsc#1106882).\n- CVE-2018-16376: Fixed heap-based buffer overflow function t2_encode_packet in lib/openmj2/t2.c (bsc#1106881).\n- CVE-2018-20845: Fixed division-by-zero in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.ci (bsc#1140130).\n- CVE-2020-6851: Fixed heap-based buffer overflow in opj_t1_clbl_decode_processor (bsc#1160782).\n- CVE-2020-8112: Fixed heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c (bsc#1162090).\n- CVE-2020-15389: Fixed use-after-free if t a mix of valid and invalid files in a directory operated on by the decompressor (bsc#1173578).\n- CVE-2020-27823: Fixed heap buffer over-write in opj_tcd_dc_level_shift_encode() (bsc#1180457).\n- CVE-2021-29338: Fixed integer overflow that allows remote attackers to crash the application (bsc#1184774).\n- CVE-2022-1122: Fixed segmentation fault in opj2_decompress due to uninitialized pointer (bsc#1197738).\n","status":"published","published":"2022-04-19T06:51:22Z","modified":"2026-02-04T04:21:33.971837Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2026:24205-1","title":"Security update for libheif","description":"This update for libheif fixes the following issues:\n\n- CVE-2026-84449: hOp_RGB24_32_to_YCbCr Memory Access Error / SEGV (bsc#1281829).\n- AV1/libaom path allows allocation before libheif rejects mismatched coded dimensions (bsc#1281953).\n- Caller-configured security limits not enforced for MINI-box parsing (bsc#1281952).\n- Heap out-of-bounds read in libheif alpha compositing via mismatched per-channel bit depths (bsc#1281951).\n- Heap-use-after-free and double free in ImageItem::encode_to_bitstream_and_boxes (bsc#1281949).\n- Incomplete OpenJPEG pre-decode security limits allow unsafe decode through the public API (bsc#1281954).\n- JPEG 2000 pclr zero-column allocation amplification bypasses max_total_memory (bsc#1281950).\n- Out-of-bounds heap read in unc_encoder_rgb_pixel_interleave (bsc#1281948).\n\nChanges for libheif:\n\n- update to 1.23.5:\n * (GHSA-v8qw-hwjv-44hw) Memory exhaustion\n through a mismatch between the container and the bitstream\n image size. A crafted image can declare a small size in its\n ispe property while the bitstream declares a much larger\n coded frame. The container-level checks used the ispe size,\n so the oversized bitstream reached the decoder, which\n allocated a frame buffer for the in-band size before libheif\n rejected the mismatch. The advisory demonstrated this for AV1\n with the libaom backend (a 351-byte AVIF declaring 64x64 but\n coding up to 27648x27648, allocating hundreds of MB to more\n than 10 GB), but the same class affects every codec whose\n real frame size lives in the bitstream. The coded size is now\n checked against max_image_size_pixels in the codec-\n independent decode path, before any bytes reach a decoder\n plugin: all AV1 sequence headers, all HEVC/AVC/VVC SPS NAL\n units (including those carried in the item data, not only the\n ones in the configuration record), the JPEG SOF marker and\n the JPEG 2000 SIZ reference grid are scanned for the largest\n coded size. (high)\n * (GHSA-qwpf-5wf7-r996) Heap use-after-free and\n double free when encoding an image that carries a TAI\n timestamp, including transcoding a file with an itai\n property. ImageDescription shallow-copied its raw\n heif_tai_timestamp_packet pointer, and a temporary in\n ImageItem::encode_to_bitstream_and_boxes() freed the packet\n while the item and the source image still held it. The\n timestamp is now stored by value. (medium)\n * (GHSA-9c75-9g8r-4728) Memory amplification\n through a JPEG 2000 pclr box declaring zero palette columns.\n The entry-count bound was skipped for zero columns, so an\n 11-byte box allocated 65,535 empty palette entries, and\n nested j2kH containers could repeat this within the child and\n nesting limits: a 3 KB file reached about 330 MB RSS, none of\n it charged to max_total_memory. Zero columns are rejected\n (ISO/IEC 15444-1 requires 1 to 255), the byte bound is\n unconditional, and the palette storage is charged to the\n memory limits. (medium)\n * (GHSA-r7gr-2xm2-23wf) Heap out-of-bounds read\n in alpha compositing for uncompressed (unci) images whose\n colour planes have different bit depths.\n Op_flatten_alpha_plane read every plane through the sample\n type of the first colour plane, so an 8-bit blue plane next\n to 16-bit red and green planes was read with a halved stride\n past its end, and the bytes ended up in the composited\n output. ColorState now tracks one bit depth per plane, and\n the operator declines mixed sample widths at planning time.\n (medium)\n * (GHSA-q492-cfcm-895h) The OpenJPEG decoder\n plugin's pre-decode size check bounded the JPEG 2000 window\n span (x1-x0)*(y1-y0) but not the absolute reference-grid\n coordinates, so a codestream with a 17-pixel window on a grid\n near the 32-bit boundary reached opj_decode(). Against\n OpenJPEG 2.3.1 this produced a heap-buffer-overflow write\n inside OpenJPEG (the class of CVE-2020-6851); OpenJPEG 2.5.4\n rejects the input. The reference-grid area is now bounded as\n well. (low)\n * (GHSA-qfj5-c4pq-q998) Heap out-of-bounds read in the\n uncompressed encoder when an application attached a separate\n alpha plane to an image with an interleaved chroma format.\n The interleaved encoders took their component list from the\n chroma format (three entries) but decided whether to write\n alpha from the presence of an alpha plane, and indexed the\n list at [3]. heif_image_add_plane() now rejects a separate\n alpha plane on interleaved images, and the encoders derive\n both decisions from the chroma format. Only reachable through\n the public API; decoding never produces such an image. (low)\n * (GHSA-7pwf-qh74-p35w) The caller's heif_security_limits were\n not applied when parsing a mini box (the MIAF minimized image\n format) or the av1C/hvcC blob embedded in it; the built-in\n defaults were used instead. An application that tightened the\n limits got no enforcement of its max_memory_block_size or\n max_total_memory on such files. The allocations are bounded\n by the bytes present in the box, so this could not amplify\n memory use. (low)\n","status":"published","published":"2026-10-08T06:22:54Z","modified":"2026-10-21T17:23:09.187019175Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:4378-1","title":"Security update for libheif","description":"This update for libheif fixes the following issues:\n\n- AV1/libaom path allows allocation before libheif rejects mismatched coded dimensions (bsc#1281953).\n- Caller-configured security limits not enforced for MINI-box parsing (bsc#1281952).\n- Heap out-of-bounds read in libheif alpha compositing via mismatched per-channel bit depths (bsc#1281951).\n- Heap-use-after-free and double free in ImageItem::encode_to_bitstream_and_boxes (bsc#1281949).\n- Incomplete OpenJPEG pre-decode security limits allow unsafe decode through the public API (bsc#1281954).\n- JPEG 2000 pclr zero-column allocation amplification bypasses max_total_memory (bsc#1281950).\n- Out-of-bounds heap read in unc_encoder_rgb_pixel_interleave (bsc#1281948).\n\nChanges for libheif:\n\nUpdate to 1.23.5:\n * (GHSA-v8qw-hwjv-44hw) Memory exhaustion\n through a mismatch between the container and the bitstream\n image size. A crafted image can declare a small size in its\n ispe property while the bitstream declares a much larger\n coded frame. The container-level checks used the ispe size,\n so the oversized bitstream reached the decoder, which\n allocated a frame buffer for the in-band size before libheif\n rejected the mismatch. The advisory demonstrated this for AV1\n with the libaom backend (a 351-byte AVIF declaring 64x64 but\n coding up to 27648x27648, allocating hundreds of MB to more\n than 10 GB), but the same class affects every codec whose\n real frame size lives in the bitstream. The coded size is now\n checked against max_image_size_pixels in the codec-\n independent decode path, before any bytes reach a decoder\n plugin: all AV1 sequence headers, all HEVC/AVC/VVC SPS NAL\n units (including those carried in the item data, not only the\n ones in the configuration record), the JPEG SOF marker and\n the JPEG 2000 SIZ reference grid are scanned for the largest\n coded size. (high)\n * (GHSA-qwpf-5wf7-r996) Heap use-after-free and\n double free when encoding an image that carries a TAI\n timestamp, including transcoding a file with an itai\n property. ImageDescription shallow-copied its raw\n heif_tai_timestamp_packet pointer, and a temporary in\n ImageItem::encode_to_bitstream_and_boxes() freed the packet\n while the item and the source image still held it. The\n timestamp is now stored by value. (medium)\n * (GHSA-9c75-9g8r-4728) Memory amplification\n through a JPEG 2000 pclr box declaring zero palette columns.\n The entry-count bound was skipped for zero columns, so an\n 11-byte box allocated 65,535 empty palette entries, and\n nested j2kH containers could repeat this within the child and\n nesting limits: a 3 KB file reached about 330 MB RSS, none of\n it charged to max_total_memory. Zero columns are rejected\n (ISO/IEC 15444-1 requires 1 to 255), the byte bound is\n unconditional, and the palette storage is charged to the\n memory limits. (medium)\n * (GHSA-r7gr-2xm2-23wf) Heap out-of-bounds read\n in alpha compositing for uncompressed (unci) images whose\n colour planes have different bit depths.\n Op_flatten_alpha_plane read every plane through the sample\n type of the first colour plane, so an 8-bit blue plane next\n to 16-bit red and green planes was read with a halved stride\n past its end, and the bytes ended up in the composited\n output. ColorState now tracks one bit depth per plane, and\n the operator declines mixed sample widths at planning time.\n (medium)\n * (GHSA-q492-cfcm-895h) The OpenJPEG decoder\n plugin's pre-decode size check bounded the JPEG 2000 window\n span (x1-x0)*(y1-y0) but not the absolute reference-grid\n coordinates, so a codestream with a 17-pixel window on a grid\n near the 32-bit boundary reached opj_decode(). Against\n OpenJPEG 2.3.1 this produced a heap-buffer-overflow write\n inside OpenJPEG (the class of CVE-2020-6851); OpenJPEG 2.5.4\n rejects the input. The reference-grid area is now bounded as\n well. (low)\n * (GHSA-qfj5-c4pq-q998) Heap out-of-bounds read in the\n uncompressed encoder when an application attached a separate\n alpha plane to an image with an interleaved chroma format.\n The interleaved encoders took their component list from the\n chroma format (three entries) but decided whether to write\n alpha from the presence of an alpha plane, and indexed the\n list at [3]. heif_image_add_plane() now rejects a separate\n alpha plane on interleaved images, and the encoders derive\n both decisions from the chroma format. Only reachable through\n the public API; decoding never produces such an image. (low)\n * (GHSA-7pwf-qh74-p35w) The caller's heif_security_limits were\n not applied when parsing a mini box (the MIAF minimized image\n format) or the av1C/hvcC blob embedded in it; the built-in\n defaults were used instead. An application that tightened the\n limits got no enforcement of its max_memory_block_size or\n max_total_memory on such files. The allocations are bounded\n by the bytes present in the box, so this could not amplify\n memory use. (low)\n","status":"published","published":"2026-09-28T15:17:27Z","modified":"2026-09-29T09:15:10.995099001Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"USN-4497-1","title":"OpenJPEG vulnerabilities","description":"It was discovered that OpenJPEG incorrectly handled certain image files. A\nremote attacker could possibly use this issue to cause a denial of service.\n(CVE-2016-9112)\n\nIt was discovered that OpenJPEG did not properly handle certain input. If\nOpenJPEG were supplied with specially crafted input, it could be made to crash\nor potentially execute arbitrary code.\n(CVE-2018-20847, CVE-2018-21010, CVE-2020-6851, CVE-2020-8112, CVE-2020-15389)\n\nIt was discovered that OpenJPEG incorrectly handled certain BMP files. A\nremote attacker could possibly use this issue to cause a denial of service.\n(CVE-2019-12973)\n","status":"published","published":"2020-09-15T18:30:32Z","modified":"2026-04-27T15:48:43.990997371Z","updated_at":"2026-11-02T16:58:14.547547Z"},{"id":"USN-4686-1","title":"ghostscript vulnerabilities","description":"It was discovered that Ghostscript incorrectly handled certain image\nfiles. If a user or automated system were tricked into processing a\nspecially crafted file, a remote attacker could use this issue to cause\nGhostscript to crash, resulting in a denial of service, or possibly\nexecute arbitrary code.\n","status":"published","published":"2021-01-07T14:10:16Z","modified":"2026-04-27T16:03:35.001338378Z","updated_at":"2026-11-02T16:58:15.159055Z"},{"id":"USN-5952-1","title":"openjpeg2 vulnerabilities","description":"Sebastian Poeplau discovered that OpenJPEG incorrectly handled certain inputs.\nIf a user or an automated system were tricked into opening a specially crafted\ninput file, a remote attacker could possibly use this issue to cause a denial\nof service or execute arbitrary code. This issue only affected Ubuntu 18.04\nLTS. (CVE-2020-6851, CVE-2020-8112)\n\nIt was discovered that OpenJPEG incorrectly handled certain inputs. If a user\nor an automated system were tricked into opening a specially crafted input\nfile, a remote attacker could possibly use this issue to cause a denial of\nservice or execute arbitrary code. This issue only affected Ubuntu 18.04 LTS.\n(CVE-2020-15389, CVE-2020-27814, CVE-2020-27823, CVE-2020-27824,\nCVE-2020-27841, CVE-2020-27845)\n\nIt was discovered that OpenJPEG incorrectly handled certain inputs. If a user\nor an automated system were tricked into opening a specially crafted input\nfile, a remote attacker could possibly use this issue to cause a denial of\nservice. (CVE-2020-27842, CVE-2020-27843)\n","status":"published","published":"2023-03-15T11:56:14Z","modified":"2026-06-25T13:31:53.102876445Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}