opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through
2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a
different issue than CVE-2020-6851. (CVE-2020-8112)
- https://bugs.mageia.org/show_bug.cgi?id=26162
- https://lists.debian.org/debian-lts-announce/2020/01/msg00035.html
- https://www.cve.org/CVERecord?id=CVE-2020-8112
- 7/core/openjpeg2-2.3.1-1.3.mga7
Get the latest Linux and open source security news straight to your inbox.