Unscored DLA-2550-1 5 CVEs

openjpeg2 - security update

Published Feb 9, 2021 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 9	openjpeg2	2.1.2-1.1+deb9u6

Vulnerabilities 5

Unscored —

CVE-2020-27814

A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. An attacker could use this flaw…

ghostscript openjpeg2 qtwebengine-opensource-src openjpeg2 Debian Ubuntu Azure Linux Alpine

Jan 25, 2021
Unscored —

CVE-2020-27823

A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to Open…

insighttoolkit4 openjpeg2 qtwebengine-opensource-src openjpeg2 Debian Ubuntu Azure Linux Alpine

May 13, 2021
Unscored —

CVE-2020-27824 Public exploit

A flaw was found in OpenJPEG’s encoder in the opj_dwt_calc_explicit_stepsizes() function. This flaw allows an attacker …

ghostscript insighttoolkit4 openjpeg2 qtwebengine-opensource-src Debian Ubuntu Azure Linux Alpine

May 13, 2021
Unscored —

CVE-2020-27841

There's a flaw in openjpeg in versions prior to 2.4.0 in src/lib/openjp2/pi.c. When an attacker is able to provide craf…

ghostscript openjpeg2 qtwebengine-opensource-src openjpeg2 Debian Ubuntu Azure Linux

Jan 5, 2021
Unscored —

CVE-2020-27845

There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrus…

ghostscript insighttoolkit4 openjpeg2 qtwebengine-opensource-src Debian Ubuntu Azure Linux

Jan 5, 2021