VULNERABILITY INTELLIGENCE

CVE-2020-27814

CVSS score7.8 HIGH

EPSS probability2.10%

CISA KEVNot currently listed

Published2021-01-26

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. An attacker could use this flaw to cause an application crash or in some cases execute arbitrary code with the permission of the user running such an application.

Weakness classification

secalert@redhat.com: CWE-122

Primary references

secalert@redhat.com — Issue Tracking, Patch, Third Party Advisory
secalert@redhat.com — Exploit, Issue Tracking, Third Party Advisory
secalert@redhat.com — Mailing List, Third Party Advisory
secalert@redhat.com — Third Party Advisory
secalert@redhat.com — Third Party Advisory
secalert@redhat.com — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Issue Tracking, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory