CVE-2020-27814: Buffer Overflow
A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. An attacker could use this flaw to cause an application crash or in some cases execute arbitrary code with the permission of the user running such an application.
Other sources
A heap-buffer overwrites error was discovered in lib/openjp2/mqc.c in OpenJPEG 2.3.1. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly remote code execution.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2020-27814?
CVE-2020-27814 is a vulnerability in openjpeg2 that allows a heap-buffer overflow when handling certain PNG format files.
How does CVE-2020-27814 impact an application?
CVE-2020-27814 can cause an application crash or allow an attacker to execute arbitrary code with the user's permission.
What is the severity level of CVE-2020-27814?
The severity level of CVE-2020-27814 is high with a CVSS score of 7.8.
Which software versions are affected by CVE-2020-27814?
Openjpeg versions 1.5.1 to 2.4.0 are affected by CVE-2020-27814, as well as some Debian and Ubuntu Linux distributions.
How can I fix CVE-2020-27814?
To fix CVE-2020-27814, update to version 2.4.0 or later of openjpeg2 or apply the appropriate patches provided by your Linux distributor.