CVE-2020-27841: debian debian_linux Heap-based Buffer Overflow

Vulnerability summary

CVE-2020-27841 is a medium (CVSS 5.5) Heap-based Buffer Overflow vulnerability in debian debian_linux. EPSS estimates a 1.45% chance of exploitation in the next 30 days, higher than 73.4% of scored vulnerabilities.

Timeline

1. 05-01-2021
   PublishedVulnerability first disclosed.
2. 04-08-2024
   Last modifiedVulnerability information updated.

Description

There's a flaw in openjpeg in versions prior to 2.4.0 in src/lib/openjp2/pi.c. When an attacker is able to provide crafted input to be processed by the openjpeg encoder, this could cause an out-of-bounds read. The greatest impact from this flaw is to application availability.

• CWE-122Heap-based Buffer OverflowThe product writes past the end of a buffer that was allocated on the heap.
• CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.