CVE-2020-27844

A flaw was found in openjpeg's src/lib/openjp2/t2.c in versions prior to 2.4.0. This flaw allows an attacker to provide crafted input to openjpeg during conversion and encoding, causing an out-of-bounds write. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

• CWE-20

• https://bugzilla.redhat.com/show_bug.cgi?id=1907521Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/02/msg00011.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202101-29Third Party Advisory
• https://www.oracle.com//security-alerts/cpujul2021.htmlPatch, Third Party Advisory
• https://www.oracle.com/security-alerts/cpuApr2021.htmlPatch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1907521Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/02/msg00011.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202101-29Third Party Advisory
• https://www.oracle.com//security-alerts/cpujul2021.htmlPatch, Third Party Advisory
• https://www.oracle.com/security-alerts/cpuApr2021.htmlPatch, Third Party Advisory

Published

Jan 5, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-27839A flaw was found in ceph-dashboard. The JSON Web Token (JWT)…5.4
• CVE-2020-2784Vulnerability in the Oracle Outside In Technology product of…7.3
• CVE-2020-27840A flaw was found in samba. Spaces used in a string around a …7.5
• CVE-2020-27841There's a flaw in openjpeg in versions prior to 2.4.0 in src…5.5
• CVE-2020-27842There's a flaw in openjpeg's t2 encoder in versions prior to…5.5
• CVE-2020-27843A flaw was found in OpenJPEG in versions prior to 2.4.0. Thi…5.5
• CVE-2020-27845There's a flaw in src/lib/openjp2/pi.c of openjpeg in versio…5.5
• CVE-2020-27846A signature verification vulnerability exists in crewjam/sam…9.8
• CVE-2020-27847A vulnerability exists in the SAML connector of the github.c…9.8
• CVE-2020-27848dotCMS before 20.10.1 allows SQL injection, as demonstrated …8.8
• CVE-2020-2785Vulnerability in the Oracle Outside In Technology product of…7.3
• CVE-2020-27850A stored Cross-Site Scripting (XSS) vulnerability in forms i…4.8