CVE-2018-20847

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2018-20847
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-20847.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2018-20847
Downstream
Related
Published
2019-06-26T18:15:10.057Z
Modified
2026-07-08T16:40:41.633753Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

An improper computation of ptx0, ptx1, pty0 and pty1 in the function opjgetencoding_parameters in openjp2/pi.c in OpenJPEG through 2.3.0 can lead to an integer overflow.

Database specific 
{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*"
            ],
            "vendor_product": "debian:debian_linux",
            "extracted_events": [
                {
                    "introduced": "8.0"
                },
                {
                    "last_affected": "8.0"
                }
            ],
            "source": "CPE_STRING"
        }
    ]
}
References

Affected packages

Git / github.com/uclouvain/openjpeg

Affected ranges

Type
GIT
Repo
https://github.com/uclouvain/openjpeg
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
081de4b15f54cb4482035b7bf5e3fb443e4bc84b
Fixed
5d00b719f4b93b1445e6fb4c766b9a9883c57949
Database specific 
{
    "cpe": "cpe:2.3:a:uclouvain:openjpeg:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0"
        }
    ],
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

v2.*
v2.2.0
v2.3.0

Database specific

vanir_signatures 
[
    {
        "digest": {
            "function_hash": "163378792543775124696387571498731229941",
            "length": 2597.0
        },
        "target": {
            "function": "opj_get_all_encoding_parameters",
            "file": "src/lib/openjp2/pi.c"
        },
        "id": "CVE-2018-20847-09c54e44",
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/uclouvain/openjpeg/commit/5d00b719f4b93b1445e6fb4c766b9a9883c57949",
        "deprecated": false
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "15260350836644213240829099315201793762",
                "173443813093649578680407006076703983292",
                "54709661076326201330083866866759711426",
                "121713522297824452935289107708446190463",
                "165168505138123589767261992393647519663",
                "46878580236153829076650875780653926826",
                "102017304529906639766385571652773303262"
            ]
        },
        "target": {
            "file": "src/lib/openjp2/tcd.c"
        },
        "id": "CVE-2018-20847-5143d364",
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://github.com/uclouvain/openjpeg/commit/5d00b719f4b93b1445e6fb4c766b9a9883c57949",
        "deprecated": false
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "176615525002015676482656684392522200543",
                "43405247619569204100702115459277374226",
                "117451511473347492792874953304723327335",
                "318359758975478787308868838886806726441",
                "100905172399819142807590137543089589464",
                "327286993796517583159493696502807280184",
                "264804895149057228764343549705254440814"
            ]
        },
        "target": {
            "file": "src/lib/openjp2/pi.c"
        },
        "id": "CVE-2018-20847-659b2ffd",
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://github.com/uclouvain/openjpeg/commit/5d00b719f4b93b1445e6fb4c766b9a9883c57949",
        "deprecated": false
    },
    {
        "digest": {
            "function_hash": "170610748971508839838692560277608944310",
            "length": 9025.0
        },
        "target": {
            "function": "opj_tcd_init_tile",
            "file": "src/lib/openjp2/tcd.c"
        },
        "id": "CVE-2018-20847-7bd4fd58",
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/uclouvain/openjpeg/commit/5d00b719f4b93b1445e6fb4c766b9a9883c57949",
        "deprecated": false
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-20847.json"
vanir_signatures_modified 
"2026-07-08T16:40:41Z"