Wind River Support Network

HomeDefectsLIN1019-5865
Fixed

LIN1019-5865 : Security Advisory - openjpeg - CVE-2020-27842

Created: Jan 6, 2021    Updated: Jan 17, 2021
Resolved Date: Jan 14, 2021
Found In Version: 10.19.45.1
Fix Version: 10.19.45.15
Severity: Standard
Applicable for: Wind River Linux LTS 19
Component/s: Userspace

Description

There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0. An attacker who is able to provide crafted input to be processed by openjpeg could cause a null pointer dereference. The highest impact of this flaw is to application availability.

CREATE(Triage):(User=admin) [CVE-2020-27842|https://nvd.nist.gov/vuln/detail/CVE-2020-27842]

CVEs


Live chat
Online