Unscored DLA-2277-1 4 CVEs

openjpeg2 - security update

Published Jul 11, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 9	openjpeg2	2.1.2-1.1+deb9u5

Vulnerabilities 4

Unscored —

CVE-2019-12973

In OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers c…

insighttoolkit4 qtwebengine-opensource-src openjpeg2 openjpeg2 Debian Ubuntu Alpine

Jun 26, 2019
Unscored —

CVE-2020-15389

jp2/opj_decompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid an…

openjpeg2 openjpeg2 openjpeg2 openjpeg Debian Ubuntu Azure Linux Alpine

Jun 29, 2020
Unscored —

CVE-2020-6851

OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack…

ghostscript insighttoolkit4 qtwebengine-opensource-src openjpeg2 Debian Ubuntu Alpine

Jan 13, 2020
Unscored —

CVE-2020-8112

opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in t…

ghostscript insighttoolkit4 openjpeg2 qtwebengine-opensource-src Debian Ubuntu Azure Linux Alpine

Jan 28, 2020