UBUNTU-CVE-2020-27841

Advisory lineage Upstream: 1 Downstream: 4
Upstream
CVE-2020-27841
Published: 05 Jan 2021, 18:15
Last modified:29 May 2026, 10:45

Vulnerability Summary

Overall Risk (default)
low
22/100
CVSS Score
5.5 MEDIUM
3.1 (osv_ubuntu)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

05 Jan 2021, 18:15
Published
Vulnerability first disclosed
29 May 2026, 10:45
Last Modified
Vulnerability information updated

Description

There's a flaw in openjpeg in versions prior to 2.4.0 in src/lib/openjp2/pi.c. When an attacker is able to provide crafted input to be processed by the openjpeg encoder, this could cause an out-of-bounds read. The greatest impact from this flaw is to application availability.

CVSS Metrics

  • v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected Systems

  • ubuntu•ghostscript

    < 9.26~dfsg+0-0ubuntu0.16.04.14 | < 9.26~dfsg+0-0ubuntu0.18.04.14

  • ubuntu•openjpeg2

    < 2.1.2-1.1+deb9u6build0.16.04.1 | < 2.3.0-2+deb10u2build0.18.04.1 | < 2.3.1-1ubuntu4.20.04.1 | < 2.3.1-1ubuntu5

  • ubuntu•qtwebengine-opensource-src

    all | all | all | all | all | all | all

References (6)