CVE-2020-27814
- Source
- https://cve.org/CVERecord?id=CVE-2020-27814
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-27814.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2020-27814
- Downstream
- Related
- Published
- 2021-01-26T18:15:46.613Z
- Modified
- 2026-02-22T01:35:28.089316Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. An attacker could use this flaw to cause an application crash or in some cases execute arbitrary code with the permission of the user running such an application.
- References
-
- https://bugzilla.redhat.com/show_bug.cgi?id=1901998
- https://github.com/uclouvain/openjpeg/issues/1283
- https://lists.debian.org/debian-lts-announce/2021/02/msg00011.html
- https://security.gentoo.org/glsa/202101-29
- https://www.debian.org/security/2021/dsa-4882
- https://www.oracle.com//security-alerts/cpujul2021.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1901998
- https://github.com/uclouvain/openjpeg/issues/1283
- https://bugzilla.redhat.com/show_bug.cgi?id=1901998
- https://lists.debian.org/debian-lts-announce/2021/02/msg00011.html
- https://github.com/uclouvain/openjpeg/issues/1283
Affected packages
Git / gitlab.freedesktop.org/slirp/libslirp
Affected versions
v2.*
v2.0.0
v2.0.0-rc1
v2.0.0-rc2
v2.0.0-rc3
v2.0.1
v2.0.2
v2.1.0
v2.1.0-rc0
v2.1.0-rc1
v2.1.0-rc2
v2.1.0-rc3
v2.1.0-rc4
v2.1.0-rc5
v2.1.1
v2.2.0
v2.2.0-rc0
v2.2.0-rc1
v2.2.0-rc2
v2.2.0-rc3
v2.2.0-rc4
v2.2.0-rc5
v2.2.1
v2.3.0
v2.3.0-rc0
v2.3.0-rc1
v2.3.0-rc2
v2.3.0-rc3
v2.3.0-rc4
v2.3.1
Database specific
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-27814.json"
vanir_signatures
[
{
"id": "CVE-2020-27814-4186c437",
"target": {
"file": "misc.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://gitlab.freedesktop.org/slirp/libslirp@dd94020cca59925585c39414929b1eb5079bb11d",
"digest": {
"threshold": 0.9,
"line_hashes": [
"150371023777414186472222309514807155810",
"42780800527369088609241952880313372145",
"156604947206935330073286223434464454440"
]
},
"signature_type": "Line"
}
]