CVE-2020-8112 log

Source	CVE Red Hat MITRE NVD Debian Ubuntu SUSE Alpine Mageia CVE Details CIRCL Bugs Arch Linux Red Hat Gentoo SUSE GitHub Lists oss-security full-disclosure bugtraq Misc GitHub code web search
Severity	Medium
Remote	No
Type	Arbitrary code execution
Description	opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG before version 2.4.0 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851.

Group	Package	Affected	Fixed	Severity	Status	Ticket
AVG-1339	openjpeg2	2.3.1-2	2.4.0-1	Medium	Fixed

Date	Advisory	Group	Package	Severity	Type
09 Dec 2020	ASA-202012-21	AVG-1339	openjpeg2	Medium	multiple issues

References
https://github.com/uclouvain/openjpeg/issues/1231 https://github.com/uclouvain/openjpeg/pull/1232 https://github.com/uclouvain/openjpeg/commit/05f9b91e60debda0e83977e5e63b2e66486f7074