CVE-2020-27824CWE-20

A flaw was found in OpenJPEG’s encoder in the opj_dwt_calc_explicit_stepsizes() function

published May 13, 2021

CVSS
—
EPSS
2%
Percentile
75.7
In the wild
Unconfirmed
What it is

A flaw was found in OpenJPEG’s encoder in the opj_dwt_calc_explicit_stepsizes() function. This flaw allows an attacker who can supply crafted input to decomposition levels to cause a buffer overflow. The highest threat from this vulnerability is to system availability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01610 · 75.7th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2021-05-13T13:56Z
EPSS history
Timeline
  • 13 MAY 13:56Z
    A flaw was found in OpenJPEG’s encoder in the opj_dwt_calc_explicit_stepsizes() function
    cvelistv5