{"id":"CVE-2020-8112","aliases":["ALPINE-CVE-2020-8112","AZL-44577","BELL-CVE-2020-8112","DEBIAN-CVE-2020-8112","DLA-2089-1","DLA-2277-1","DSA-4882-1","EUVD-2020-29023","GHSA-g38x-2w55-fmr9","JLSEC-2026-544","MGASA-2020-0074","OESA-2021-1234","RHSA-2020:0550","RHSA-2020:0569","RHSA-2020:0570","SUSE-SU-2022:1129-1","SUSE-SU-2022:1252-1","SUSE-SU-2022:1296-1","UBUNTU-CVE-2020-8112","USN-4497-1","USN-4686-1","USN-5952-1","openSUSE-SU-2024:11120-1"],"status":"published","title":"opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap...","description":"opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.03624,"percentile":0.89618,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2020-01-28T17:22:42Z","modified":"2026-11-05T05:36:30Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"openjpeg","fixed_in":["2.3.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"openjpeg","fixed_in":["2.3.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"openjpeg","fixed_in":["2.3.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"openjpeg","fixed_in":["2.3.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"openjpeg","fixed_in":["2.3.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"openjpeg","fixed_in":["2.3.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"openjpeg","fixed_in":["2.3.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"openjpeg","fixed_in":["2.3.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"openjpeg","fixed_in":["2.3.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"openjpeg","fixed_in":["2.3.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"openjpeg","fixed_in":["2.3.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"openjpeg","fixed_in":["2.3.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"openjpeg","fixed_in":["2.3.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openjpeg","fixed_in":["2.3.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openjpeg","fixed_in":["2.3.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"openjpeg","fixed_in":["2.3.0-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"openjpeg","fixed_in":["2.3.0-r5"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"openjpeg2","fixed_in":["2.3.1-12"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"openjpeg2","fixed_in":["2.4.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openjpeg2","fixed_in":["2.4.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openjpeg2","fixed_in":["2.4.0-1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"openjpeg2","fixed_in":["2.1.0-2+deb8u10"],"sources":["osv"]},{"ecosystem":"Julia","package":"OpenJpeg_jll","fixed_in":["2.4.0+0"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"openjpeg2","fixed_in":["2.3.1-1.3.mga7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"openjpeg2","fixed_in":["0:2.3.1-3.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"openjpeg2-debuginfo","fixed_in":["0:2.3.1-3.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"openjpeg2-devel","fixed_in":["0:2.3.1-3.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"openjpeg2-devel-docs","fixed_in":["0:2.3.1-3.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"openjpeg2-tools","fixed_in":["0:2.3.1-3.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openjpeg2","fixed_in":["0:2.3.1-3.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openjpeg2-debuginfo","fixed_in":["0:2.3.1-3.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openjpeg2-devel","fixed_in":["0:2.3.1-3.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openjpeg2-devel-docs","fixed_in":["0:2.3.1-3.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openjpeg2-tools","fixed_in":["0:2.3.1-3.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"openjpeg2","fixed_in":["0:2.3.1-3.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"openjpeg2-debuginfo","fixed_in":["0:2.3.1-3.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"openjpeg2-devel","fixed_in":["0:2.3.1-3.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"openjpeg2-devel-docs","fixed_in":["0:2.3.1-3.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"openjpeg2-tools","fixed_in":["0:2.3.1-3.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openjpeg2","fixed_in":["0:2.3.1-3.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openjpeg2-debuginfo","fixed_in":["0:2.3.1-3.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openjpeg2-devel","fixed_in":["0:2.3.1-3.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openjpeg2-devel-docs","fixed_in":["0:2.3.1-3.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openjpeg2-tools","fixed_in":["0:2.3.1-3.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"openjpeg2","fixed_in":["0:2.3.0-10.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"openjpeg2-debuginfo","fixed_in":["0:2.3.0-10.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"openjpeg2-debugsource","fixed_in":["0:2.3.0-10.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"openjpeg2-devel-docs","fixed_in":["0:2.3.0-10.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"openjpeg2-tools","fixed_in":["0:2.3.0-10.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"openjpeg2-tools-debuginfo","fixed_in":["0:2.3.0-10.el8_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openjpeg2","fixed_in":["0:2.3.1-3.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openjpeg2-debuginfo","fixed_in":["0:2.3.1-3.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openjpeg2-debugsource","fixed_in":["0:2.3.1-3.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openjpeg2-devel-docs","fixed_in":["0:2.3.1-3.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openjpeg2-tools","fixed_in":["0:2.3.1-3.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openjpeg2-tools-debuginfo","fixed_in":["0:2.3.1-3.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openjpeg2-debuginfo","fixed_in":["0:2.3.1-3.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openjpeg2-debugsource","fixed_in":["0:2.3.1-3.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openjpeg2-devel","fixed_in":["0:2.3.1-3.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openjpeg2-tools","fixed_in":["0:2.3.1-3.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openjpeg2-tools-debuginfo","fixed_in":["0:2.3.1-3.el8_1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"ghostscript","fixed_in":["9.26~dfsg+0-0ubuntu0.16.04.14"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"openjpeg2","fixed_in":["2.1.2-1.1+deb9u5build0.16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"ghostscript","fixed_in":["9.26~dfsg+0-0ubuntu0.18.04.14"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"openjpeg2","fixed_in":["2.3.0-2+deb10u2build0.18.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"openjpeg2","fixed_in":["2.3.1-1ubuntu4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-r5"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-12"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-2+deb8u10"}]}],"versions":["2.1.0-2","2.1.0-2+deb8u1","2.1.0-2+deb8u2","2.1.0-2+deb8u3","2.1.0-2+deb8u4","2.1.0-2+deb8u5","2.1.0-2+deb8u6","2.1.0-2+deb8u7","2.1.0-2+deb8u8","2.1.0-2+deb8u9"]},{"source":"osv","ecosystem":"Debian:9","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-1.1+deb9u5"}]}],"versions":["2.1.2-1.1","2.1.2-1.1+deb9u1","2.1.2-1.1+deb9u2","2.1.2-1.1+deb9u3","2.1.2-1.1+deb9u4"],"bundled":4},{"source":"osv","ecosystem":"Debian:10","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-2+deb10u2"}]}],"versions":["2.3.0-2","2.3.0-2+deb10u1"],"bundled":10},{"source":"osv","ecosystem":"Julia","package":"OpenJpeg_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.4.0+0"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-1.3.mga7"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-6.oe1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-3.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openjpeg2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-3.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openjpeg2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-3.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openjpeg2-devel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-3.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openjpeg2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-3.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-3.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openjpeg2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-3.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openjpeg2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-3.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openjpeg2-devel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-3.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openjpeg2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-3.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-3.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openjpeg2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-3.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openjpeg2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-3.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openjpeg2-devel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-3.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openjpeg2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-3.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-3.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openjpeg2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-3.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openjpeg2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-3.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openjpeg2-devel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-3.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openjpeg2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-3.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-10.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"openjpeg2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-10.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"openjpeg2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-10.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"openjpeg2-devel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-10.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"openjpeg2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-10.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"openjpeg2-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-10.el8_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-3.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openjpeg2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-3.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openjpeg2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-3.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openjpeg2-devel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-3.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openjpeg2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-3.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openjpeg2-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-3.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openjpeg2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-3.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openjpeg2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-3.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openjpeg2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-3.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openjpeg2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-3.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openjpeg2-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-3.el8_1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-4.15.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-4.15.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-4.15.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-4.15.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-4.15.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-4.15.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-4.15.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-4.15.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-4.15.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-4.15.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-4.15.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-4.15.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-4.15.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP3","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.5.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP3","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-150000.4.5.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-150000.4.5.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-150000.4.5.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-150000.4.5.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-150000.4.5.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-150000.4.5.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-150000.4.5.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-150000.4.5.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-150000.4.5.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-150000.4.5.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-150000.4.5.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-150000.4.5.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-150000.4.5.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-150000.4.5.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-150000.4.5.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-150000.4.5.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-150000.4.5.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-150000.4.5.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-150000.4.5.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-150000.4.5.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-150000.4.5.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-150000.4.5.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.26~dfsg+0-0ubuntu0.16.04.14"}]}],"versions":["9.16~dfsg~0-0ubuntu3","9.16~dfsg~0-0ubuntu4","9.18~dfsg~0-0ubuntu1","9.18~dfsg~0-0ubuntu2","9.18~dfsg~0-0ubuntu2.2","9.18~dfsg~0-0ubuntu2.3","9.18~dfsg~0-0ubuntu2.4","9.18~dfsg~0-0ubuntu2.6","9.18~dfsg~0-0ubuntu2.7","9.18~dfsg~0-0ubuntu2.8","9.18~dfsg~0-0ubuntu2.9","9.25~dfsg+1-0ubuntu0.16.04.1","9.25~dfsg+1-0ubuntu0.16.04.2","9.25~dfsg+1-0ubuntu0.16.04.3","9.26~dfsg+0-0ubuntu0.16.04.1","9.26~dfsg+0-0ubuntu0.16.04.3","9.26~dfsg+0-0ubuntu0.16.04.4","9.26~dfsg+0-0ubuntu0.16.04.5","9.26~dfsg+0-0ubuntu0.16.04.6","9.26~dfsg+0-0ubuntu0.16.04.7","9.26~dfsg+0-0ubuntu0.16.04.8","9.26~dfsg+0-0ubuntu0.16.04.9","9.26~dfsg+0-0ubuntu0.16.04.10","9.26~dfsg+0-0ubuntu0.16.04.11","9.26~dfsg+0-0ubuntu0.16.04.12","9.26~dfsg+0-0ubuntu0.16.04.13"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-1.1+deb9u5build0.16.04.1"}]}],"versions":["2.1.0-2.1","2.1.0-2.1ubuntu0.1","2.1.2-1.1+deb9u2build0.1","2.1.2-1.1+deb9u3build0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.74+dfsg0-4build2","2.75.a+dfsg0-2ubuntu2","2.75.a+dfsg0-2ubuntu3","2.76.b+dfsg0-3","2.76.b+dfsg0-3build1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"insighttoolkit4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.8.1-1ubuntu3","4.8.1-1ubuntu4","4.8.2-3.1ubuntu1","4.9.0-3ubuntu2","4.9.0-4ubuntu1","4.9.0-4ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.4.1-1","4.4.1-1.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.26~dfsg+0-0ubuntu0.18.04.14"}]}],"versions":["9.21~dfsg+1-0ubuntu3","9.22~dfsg+1-0ubuntu1","9.22~dfsg+1-0ubuntu1.1","9.22~dfsg+1-0ubuntu1.2","9.25~dfsg+1-0ubuntu0.18.04.1","9.25~dfsg+1-0ubuntu0.18.04.2","9.26~dfsg+0-0ubuntu0.18.04.1","9.26~dfsg+0-0ubuntu0.18.04.3","9.26~dfsg+0-0ubuntu0.18.04.4","9.26~dfsg+0-0ubuntu0.18.04.5","9.26~dfsg+0-0ubuntu0.18.04.6","9.26~dfsg+0-0ubuntu0.18.04.7","9.26~dfsg+0-0ubuntu0.18.04.8","9.26~dfsg+0-0ubuntu0.18.04.9","9.26~dfsg+0-0ubuntu0.18.04.10","9.26~dfsg+0-0ubuntu0.18.04.11","9.26~dfsg+0-0ubuntu0.18.04.12","9.26~dfsg+0-0ubuntu0.18.04.13"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-2+deb10u2build0.18.04.1"}]}],"versions":["2.2.0-1","2.3.0-1","2.3.0-2build0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.78.c+dfsg0-2build1","2.79+dfsg0-2build1","2.79+dfsg0-3","2.79+dfsg0-3build1","2.79.b+dfsg0-1","2.79.b+dfsg0-1ubuntu1.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"insighttoolkit4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.12.2-dfsg1-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.9.1+dfsg-4","5.9.1+dfsg-4ubuntu1","5.9.2+dfsg-2ubuntu1","5.9.3+dfsg-0ubuntu1","5.9.4+dfsg-0ubuntu1","5.9.5+dfsg-0ubuntu2","5.9.5+dfsg-0ubuntu2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.5-1","5.0.2-1","5.0.2-1build1","5.0.2-1build2","5.0.2-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-1ubuntu4"}]}],"versions":["2.3.0-2","2.3.0-2build1","2.3.1-1","2.3.1-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.80+dfsg-3","2.80+dfsg-3build1","2.80+dfsg-4","2.81.a+dfsg-5build3","2.82+dfsg-1","2.82+dfsg-1build1","2.82.a+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"insighttoolkit4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.12.2-dfsg1-4.1ubuntu1","4.13.2-dfsg1-1ubuntu1","4.13.2-dfsg1-4ubuntu1","4.13.2-dfsg1-6","4.13.2-dfsg1-6ubuntu1","4.13.2-dfsg1-8"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.12.4+dfsg-1ubuntu1","5.12.4+dfsg-1ubuntu3","5.12.5+dfsg-3ubuntu1","5.12.5+dfsg-6ubuntu2","5.12.5+dfsg-7","5.12.5+dfsg-7build1","5.12.8+dfsg-0ubuntu1","5.12.8+dfsg-0ubuntu1.1","5.12.8+dfsg-0ubuntu1.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.3-1build2","5.0.3-1build3","5.0.3-1build4","5.0.3-1build5","5.0.3-1ubuntu0.20.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.93.3+dfsg-3","2.93.5+dfsg-1","2.93.5+dfsg-1build1","3.0.1+dfsg-7"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"insighttoolkit4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.13.3withdata-dfsg1-4.1","4.13.3withdata-dfsg2-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.6+dfsg-1","5.15.6+dfsg-2","5.15.7+dfsg-2","5.15.8+dfsg-1","5.15.8+dfsg-1build1","5.15.8+dfsg-1build2","5.15.8+dfsg-2","5.15.9+dfsg-1","5.15.9+dfsg-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.3-1build8","5.0.3-1build9","5.0.3-1ubuntu0.22.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.6.2+dfsg-2ubuntu1","3.6.2+dfsg-2ubuntu2","4.0.2+dfsg-1ubuntu1","4.0.2+dfsg-1ubuntu2","4.0.2+dfsg-1ubuntu4","4.0.2+dfsg-1ubuntu6","4.0.2+dfsg-1ubuntu7","4.0.2+dfsg-1ubuntu8"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.15+dfsg-2","5.15.15+dfsg-2build2","5.15.15+dfsg-2ubuntu1","5.15.16+dfsg-1","5.15.16+dfsg-1ubuntu2","5.15.16+dfsg-1ubuntu4","5.15.16+dfsg-3","5.15.16+dfsg-3ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.1.3+dfsg-1build4","5.1.3+dfsg-1build5","5.1.3+dfsg-1build6","5.1.3+dfsg-1build7","5.1.3+dfsg-1build8","5.1.3+dfsg-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.2+dfsg-2","4.3.2+dfsg-2ubuntu1","4.3.2+dfsg-2ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.18+dfsg-2","5.15.18+dfsg-2build1","5.15.19+dfsg-1","5.15.19+dfsg2-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.1.3+dfsg-3","5.1.3+dfsg-3build1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.1+dfsg-1ubuntu1","5.0.1+dfsg-1ubuntu3","5.0.1+dfsg-3build1","5.0.1+dfsg-5"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.19+dfsg2-4","5.15.19+dfsg2-6","5.15.19+dfsg2-7"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.0.1+dfsg-3build1","6.0.1+dfsg-3build2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.2+dfsg-2ubuntu2","5.0.1+dfsg-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.1.3+dfsg-3build1","6.0.1+dfsg-3","6.0.1+dfsg-3build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:26.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.19+dfsg2-1","5.15.19+dfsg2-1build1","5.15.19+dfsg2-2","5.15.19+dfsg2-3","5.15.19+dfsg2-4","5.15.19+dfsg2-4ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-1.1+deb9u5build0.16.04.1"}]}],"versions":["2.1.0-2.1","2.1.0-2.1ubuntu0.1","2.1.2-1.1+deb9u2build0.1","2.1.2-1.1+deb9u3build0.16.04.1"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.26~dfsg+0-0ubuntu0.16.04.14"}]}],"versions":["9.16~dfsg~0-0ubuntu3","9.16~dfsg~0-0ubuntu4","9.18~dfsg~0-0ubuntu1","9.18~dfsg~0-0ubuntu2","9.18~dfsg~0-0ubuntu2.2","9.18~dfsg~0-0ubuntu2.3","9.18~dfsg~0-0ubuntu2.4","9.18~dfsg~0-0ubuntu2.6","9.18~dfsg~0-0ubuntu2.7","9.18~dfsg~0-0ubuntu2.8","9.18~dfsg~0-0ubuntu2.9","9.25~dfsg+1-0ubuntu0.16.04.1","9.25~dfsg+1-0ubuntu0.16.04.2","9.25~dfsg+1-0ubuntu0.16.04.3","9.26~dfsg+0-0ubuntu0.16.04.1","9.26~dfsg+0-0ubuntu0.16.04.3","9.26~dfsg+0-0ubuntu0.16.04.4","9.26~dfsg+0-0ubuntu0.16.04.5","9.26~dfsg+0-0ubuntu0.16.04.6","9.26~dfsg+0-0ubuntu0.16.04.7","9.26~dfsg+0-0ubuntu0.16.04.8","9.26~dfsg+0-0ubuntu0.16.04.9","9.26~dfsg+0-0ubuntu0.16.04.10","9.26~dfsg+0-0ubuntu0.16.04.11","9.26~dfsg+0-0ubuntu0.16.04.12","9.26~dfsg+0-0ubuntu0.16.04.13"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.26~dfsg+0-0ubuntu0.18.04.14"}]}],"versions":["9.21~dfsg+1-0ubuntu3","9.22~dfsg+1-0ubuntu1","9.22~dfsg+1-0ubuntu1.1","9.22~dfsg+1-0ubuntu1.2","9.25~dfsg+1-0ubuntu0.18.04.1","9.25~dfsg+1-0ubuntu0.18.04.2","9.26~dfsg+0-0ubuntu0.18.04.1","9.26~dfsg+0-0ubuntu0.18.04.3","9.26~dfsg+0-0ubuntu0.18.04.4","9.26~dfsg+0-0ubuntu0.18.04.5","9.26~dfsg+0-0ubuntu0.18.04.6","9.26~dfsg+0-0ubuntu0.18.04.7","9.26~dfsg+0-0ubuntu0.18.04.8","9.26~dfsg+0-0ubuntu0.18.04.9","9.26~dfsg+0-0ubuntu0.18.04.10","9.26~dfsg+0-0ubuntu0.18.04.11","9.26~dfsg+0-0ubuntu0.18.04.12","9.26~dfsg+0-0ubuntu0.18.04.13"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-1.1+deb9u6ubuntu0.1~esm3"}]}],"versions":["2.1.0-2.1","2.1.0-2.1ubuntu0.1","2.1.2-1.1+deb9u2build0.1","2.1.2-1.1+deb9u3build0.16.04.1","2.1.2-1.1+deb9u3ubuntu0.1~esm1","2.1.2-1.1+deb9u5build0.16.04.1","2.1.2-1.1+deb9u5ubuntu0.1~esm1","2.1.2-1.1+deb9u6build0.16.04.1","2.1.2-1.1+deb9u6ubuntu0.1~esm1"],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-2+deb10u2build0.18.04.1"}]}],"versions":["2.2.0-1","2.3.0-1","2.3.0-2build0.18.04.1"],"bundled":10}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"uclouvain","product":"openjpeg"}],"references":[{"url":"https://lists.debian.org/debian-lts-announce/2020/01/msg00035.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web","report"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0550","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TFEVEKETJV7GOXD5RDWL35ESEDHC663E/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0570","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0569","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EFM77GIFWHOECNIERYJQPI2ZJU57GZD5/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0694","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/07/msg00008.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://github.com/uclouvain/openjpeg/issues/1231","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","web"]},{"url":"https://www.debian.org/security/2021/dsa-4882","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8112","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EFM77GIFWHOECNIERYJQPI2ZJU57GZD5/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TFEVEKETJV7GOXD5RDWL35ESEDHC663E/"},{"url":"https://github.com/advisories/GHSA-g38x-2w55-fmr9"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-8112","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2020-8112","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-8112","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0074.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=26162","tags":["report"]},{"url":"https://www.debian.org/lts/security/2020/dla-2089","tags":["web"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1234","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27823","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27824","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-6851","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1800535","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0550.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-8112","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-8112","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0569.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0570.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221129-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1102016","tags":["report"]},{"url":"https://bugzilla.suse.com/1106881","tags":["report"]},{"url":"https://bugzilla.suse.com/1106882","tags":["report"]},{"url":"https://bugzilla.suse.com/1140130","tags":["report"]},{"url":"https://bugzilla.suse.com/1140205","tags":["report"]},{"url":"https://bugzilla.suse.com/1162090","tags":["report"]},{"url":"https://bugzilla.suse.com/1173578","tags":["report"]},{"url":"https://bugzilla.suse.com/1180457","tags":["report"]},{"url":"https://bugzilla.suse.com/1184774","tags":["report"]},{"url":"https://bugzilla.suse.com/1197738","tags":["report"]},{"url":"https://bugzilla.suse.com/971617","tags":["report"]},{"url":"https://bugzilla.suse.com/980504","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1924","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1122","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221252-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1076314","tags":["report"]},{"url":"https://bugzilla.suse.com/1076967","tags":["report"]},{"url":"https://bugzilla.suse.com/1079845","tags":["report"]},{"url":"https://bugzilla.suse.com/1160782","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5727","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-6616","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6851","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221296-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-8112","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4686-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4497-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5952-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-9112","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-20847","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-21010","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-12973","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-6851","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-15389","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5727","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27814","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27824","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27841","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27842","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27843","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27845","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27823","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8332","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12982","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14040","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14151","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7648","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12973","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-8112","description":"opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851.","status":"published","published":"2020-01-28T17:22:42Z","modified":"2024-08-04T09:48:25.675Z","updated_at":"2026-11-02T14:35:50.88562Z"}],"euvd":[{"id":"EUVD-2020-29023","description":"opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851.","status":"published","published":"2020-01-28T17:22:42Z","modified":"2024-08-04T09:48:25Z","updated_at":"2026-11-03T03:07:58.055641Z"}],"ghsa":[{"id":"GHSA-g38x-2w55-fmr9","title":"opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap...","description":"opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851.","status":"published","published":"2022-05-24T17:07:38Z","modified":"2023-01-29T05:01:14Z","cwes":["CWE-787"],"updated_at":"2026-11-02T14:44:45.930691Z"}],"nvd":[{"id":"CVE-2020-8112","description":"opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851.","status":"published","published":"2020-01-28T18:15:11.743Z","modified":"2026-06-17T03:25:52.897Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:05:53.837808Z"}],"osv":[{"id":"ALPINE-CVE-2020-8112","description":"opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851.","status":"published","published":"2020-01-28T18:15:11.743Z","modified":"2026-10-26T11:17:55.182067151Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:48.11886Z"},{"id":"AZL-44577","title":"CVE-2020-8112 affecting package openjpeg2 for versions less than 2.3.1-12","description":"opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851.","status":"published","published":"2020-01-28T18:15:11Z","modified":"2026-11-05T05:36:30Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-05T16:41:20.107976Z"},{"id":"BELL-CVE-2020-8112","title":"CVE-2020-8112 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:04.926701Z","modified":"2026-01-26T09:46:33.193414Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:15.925958Z"},{"id":"CVE-2020-8112","description":"opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851.","status":"published","published":"2020-01-28T18:15:11.743Z","modified":"2026-10-20T10:54:24.548216909Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:17.663289Z"},{"id":"DEBIAN-CVE-2020-8112","description":"opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851.","status":"published","published":"2020-01-28T18:15:11.743Z","modified":"2026-10-26T12:02:51.65224442Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:34.311861Z"},{"id":"JLSEC-2026-544","description":"`opj_t1_clbl_decode_processor` in `openjp2/t1.c` in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851.","status":"published","published":"2026-05-26T19:31:24.313Z","modified":"2026-07-25T18:24:37.016886412Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:18.573531Z"},{"id":"OESA-2021-1234","title":"openjpeg2 security update","description":"OpenJPEG is an open-source JPEG 2000 codec written in C language. It has been developed in order to promote the use of JPEG 2000, a still-image compression standard from the Joint Photographic Experts Group (JPEG). Since April 2015, it is officially recognized by ISO/IEC and ITU-T as a JPEG 2000 Reference Software.\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during encoding. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.(CVE-2020-27823)\r\n\r\nA flaw was found in OpenJPEG’s encoder in the opj_dwt_calc_explicit_stepsizes() function. This flaw allows an attacker who can supply crafted input to decomposition levels to cause a buffer overflow. The highest threat from this vulnerability is to system availability.(CVE-2020-27824)\r\n\r\nopj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851.(CVE-2020-8112)\n\nAOpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation.(CVE-2020-6851)","status":"published","published":"2021-06-22T11:04:28Z","modified":"2026-08-18T01:15:43.759224743Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2020:0550","title":"Red Hat Security Advisory: openjpeg2 security update","status":"published","published":"2024-09-16T03:31:44Z","modified":"2026-06-26T10:46:13Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:0569","title":"Red Hat Security Advisory: openjpeg2 security update","status":"published","published":"2024-09-16T03:31:51Z","modified":"2025-11-22T11:55:38Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:0570","title":"Red Hat Security Advisory: openjpeg2 security update","status":"published","published":"2024-09-16T03:31:59Z","modified":"2026-06-26T12:22:04.557029342Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"UBUNTU-CVE-2020-8112","description":"opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851.","status":"published","published":"2020-01-28T18:15:00Z","modified":"2026-10-17T12:56:56.876619491Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:25.728622Z"},{"id":"DLA-2089-1","title":"openjpeg2 - security update","status":"published","published":"2020-01-30T00:00:00Z","modified":"2026-03-09T01:23:35.81029Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DLA-2277-1","title":"openjpeg2 - security update","status":"published","published":"2020-07-11T00:00:00Z","modified":"2026-03-09T01:21:46.20254Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DSA-4882-1","title":"openjpeg2 - security update","status":"published","published":"2021-04-01T00:00:00Z","modified":"2026-03-09T02:09:34.84881Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"MGASA-2020-0074","title":"Updated openjpeg2 packages fix security vulnerability","description":"opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through\n2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a\ndifferent issue than CVE-2020-6851. (CVE-2020-8112)\n","status":"published","published":"2020-02-04T11:07:12Z","modified":"2026-04-16T04:42:02.640447416Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2024:11120-1","title":"libopenjp2-7-2.4.0-1.4 on GA media","description":"These are all security issues fixed in the libopenjp2-7-2.4.0-1.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:39:34.719167Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2022:1129-1","title":"Security update for openjpeg2","description":"This update for openjpeg2 fixes the following issues:\n\n- CVE-2016-1924: Fixed heap buffer overflow (bsc#980504).\n- CVE-2016-3183: Fixed out-of-bounds read in sycc422_to_rgb function (bsc#971617).\n- CVE-2016-4797: Fixed heap buffer overflow (bsc#980504).\n- CVE-2018-14423: Fixed division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl,and pi_next_rpcl in lib/openjp3d/pi.c (bsc#1102016).\n- CVE-2018-16375: Fixed missing checks for header_info.height and header_info.width in the function pnmtoimage in bin/jpwl/convert.c (bsc#1106882).\n- CVE-2018-16376: Fixed heap-based buffer overflow function t2_encode_packet in lib/openmj2/t2.c (bsc#1106881).\n- CVE-2018-20845: Fixed division-by-zero in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c (bsc#1140130).\n- CVE-2018-20846: Fixed out-of-bounds accesses in pi_next_lrcp, pi_next_rlcp, pi_next_rpcl, pi_next_pcrl, pi_next_rpcl, and pi_next_cprl in openmj2/pi.c (bsc#1140205).\n- CVE-2020-8112: Fixed heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c (bsc#1162090).\n- CVE-2020-15389: Fixed use-after-free if t a mix of valid and invalid files in a directory operated on by the decompressor (bsc#1173578).\n- CVE-2020-27823: Fixed heap buffer over-write in opj_tcd_dc_level_shift_encode() (bsc#1180457).\n- CVE-2021-29338: Fixed integer overflow that allows remote attackers to crash the application (bsc#1184774).\n- CVE-2022-1122: Fixed segmentation fault in opj2_decompress due to uninitialized pointer (bsc#1197738).\n","status":"published","published":"2022-04-07T14:35:05Z","modified":"2026-02-04T03:14:52.237102Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:1252-1","title":"Security update for openjpeg2","description":"This update for openjpeg2 fixes the following issues:\n\n- CVE-2018-5727: Fixed integer overflow vulnerability in theopj_t1_encode_cblks function (bsc#1076314).\n- CVE-2018-5785: Fixed integer overflow caused by an out-of-bounds leftshift in the opj_j2k_setup_encoder function (bsc#1076967).\n- CVE-2018-6616: Fixed excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c (bsc#1079845).\n- CVE-2018-14423: Fixed division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl,and pi_next_rpcl in lib/openjp3d/pi.c (bsc#1102016).\n- CVE-2018-16375: Fixed missing checks for header_info.height and header_info.width in the function pnmtoimage in bin/jpwl/convert.c (bsc#1106882).\n- CVE-2018-16376: Fixed heap-based buffer overflow function t2_encode_packet in lib/openmj2/t2.c (bsc#1106881).\n- CVE-2018-20845: Fixed division-by-zero in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.ci (bsc#1140130).\n- CVE-2020-6851: Fixed heap-based buffer overflow in opj_t1_clbl_decode_processor (bsc#1160782).\n- CVE-2020-8112: Fixed heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c (bsc#1162090).\n- CVE-2020-15389: Fixed use-after-free if t a mix of valid and invalid files in a directory operated on by the decompressor (bsc#1173578).\n- CVE-2020-27823: Fixed heap buffer over-write in opj_tcd_dc_level_shift_encode() (bsc#1180457).\n- CVE-2021-29338: Fixed integer overflow that allows remote attackers to crash the application (bsc#1184774).\n- CVE-2022-1122: Fixed segmentation fault in opj2_decompress due to uninitialized pointer (bsc#1197738).\n","status":"published","published":"2022-04-19T06:51:22Z","modified":"2026-02-04T04:21:33.971837Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:1296-1","title":"Security update for openjpeg","description":"This update for openjpeg fixes the following issues:\n\n- CVE-2018-14423: Fixed division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl,and pi_next_rpcl in lib/openjp3d/pi.c (bsc#1102016).\n- CVE-2018-16376: Fixed heap-based buffer overflow function t2_encode_packet in lib/openmj2/t2.c (bsc#1106881).\n- CVE-2020-8112: Fixed a heap buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c (bsc#1162090).\n- CVE-2020-15389: Fixed a use-after-free if a mix of valid and invalid files in a directory operated on by the decompressor (bsc#1173578).\n- CVE-2020-27823: Fixed a heap buffer over-write in opj_tcd_dc_level_shift_encode() (bsc#1180457),\n- CVE-2021-29338: Fixed an integer Overflow allows remote attackers to crash the application (bsc#1184774).\n","status":"published","published":"2022-04-21T15:29:02Z","modified":"2026-02-04T03:07:14.341251Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"USN-4497-1","title":"OpenJPEG vulnerabilities","description":"It was discovered that OpenJPEG incorrectly handled certain image files. A\nremote attacker could possibly use this issue to cause a denial of service.\n(CVE-2016-9112)\n\nIt was discovered that OpenJPEG did not properly handle certain input. If\nOpenJPEG were supplied with specially crafted input, it could be made to crash\nor potentially execute arbitrary code.\n(CVE-2018-20847, CVE-2018-21010, CVE-2020-6851, CVE-2020-8112, CVE-2020-15389)\n\nIt was discovered that OpenJPEG incorrectly handled certain BMP files. A\nremote attacker could possibly use this issue to cause a denial of service.\n(CVE-2019-12973)\n","status":"published","published":"2020-09-15T18:30:32Z","modified":"2026-04-27T15:48:43.990997371Z","updated_at":"2026-11-02T16:58:14.547547Z"},{"id":"USN-4686-1","title":"ghostscript vulnerabilities","description":"It was discovered that Ghostscript incorrectly handled certain image\nfiles. If a user or automated system were tricked into processing a\nspecially crafted file, a remote attacker could use this issue to cause\nGhostscript to crash, resulting in a denial of service, or possibly\nexecute arbitrary code.\n","status":"published","published":"2021-01-07T14:10:16Z","modified":"2026-04-27T16:03:35.001338378Z","updated_at":"2026-11-02T16:58:15.159055Z"},{"id":"USN-5952-1","title":"openjpeg2 vulnerabilities","description":"Sebastian Poeplau discovered that OpenJPEG incorrectly handled certain inputs.\nIf a user or an automated system were tricked into opening a specially crafted\ninput file, a remote attacker could possibly use this issue to cause a denial\nof service or execute arbitrary code. This issue only affected Ubuntu 18.04\nLTS. (CVE-2020-6851, CVE-2020-8112)\n\nIt was discovered that OpenJPEG incorrectly handled certain inputs. If a user\nor an automated system were tricked into opening a specially crafted input\nfile, a remote attacker could possibly use this issue to cause a denial of\nservice or execute arbitrary code. This issue only affected Ubuntu 18.04 LTS.\n(CVE-2020-15389, CVE-2020-27814, CVE-2020-27823, CVE-2020-27824,\nCVE-2020-27841, CVE-2020-27845)\n\nIt was discovered that OpenJPEG incorrectly handled certain inputs. If a user\nor an automated system were tricked into opening a specially crafted input\nfile, a remote attacker could possibly use this issue to cause a denial of\nservice. (CVE-2020-27842, CVE-2020-27843)\n","status":"published","published":"2023-03-15T11:56:14Z","modified":"2026-06-25T13:31:53.102876445Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}