CVE-2020-27843CWE-125

A flaw was found in OpenJPEG in versions prior to 2.4.0

published January 5, 2021

CVSS
—
EPSS
2%
Percentile
78.0
In the wild
Unconfirmed
What it is

A flaw was found in OpenJPEG in versions prior to 2.4.0. This flaw allows an attacker to provide specially crafted input to the conversion or encoding functionality, causing an out-of-bounds read. The highest threat from this vulnerability is system availability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01772 · 78.0th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2021-01-05T17:22Z
EPSS history
Timeline
  • 05 JAN 17:22Z
    A flaw was found in OpenJPEG in versions prior to 2.4.0
    cvelistv5