CVE-2020-27823CWE-20

A flaw was found in OpenJPEG’s encoder

published May 13, 2021

CVSS
—
EPSS
1%
Percentile
65.6
In the wild
Unconfirmed
What it is

A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during encoding. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01107 · 65.6th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2021-05-13T14:03Z
EPSS history
Timeline
  • 13 MAY 14:03Z
    A flaw was found in OpenJPEG’s encoder
    cvelistv5