CVE-2020-15389

MEDIUM EPSS 83.4%
Published Jun 29, 20206y ago · Modified Jun 17, 20262w ago
6.5 CVSS 3.1
Medium
Find Similar
Published Jun 29, 2020 6y ago
Last Modified Jun 17, 2026 2w ago

Description

jp2/opj_decompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid and invalid files in a directory operated on by the decompressor. Triggering a double-free may also be possible. This is related to calling opj_image_destroy twice.

CVSS Details

Base Score
6.5
Exploitability
2.2
Impact
4.2
Vector string
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H
Attack Vector Network
Attack Complexity High
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality Low
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
83.4% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-416 Use After Free Memory Safety

Affected Products 5

VendorProductVersionRange
uclouvainopenjpeg* ≤2.3.1
debiandebian_linux9.0any
debiandebian_linux10.0any
oracleoutside_in_technology8.5.4any
oracleoutside_in_technology8.5.5any

References 7

  • github.com https://github.com/uclouvain/openjpeg/issues/1261
    PatchThird Party Advisory
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2020/07/msg00008.html
    Mailing ListThird Party Advisory
  • pastebin.com https://pastebin.com/4sDKQ7U8
    Third Party Advisory
  • security.gentoo.org https://security.gentoo.org/glsa/202101-29
    Third Party Advisory
  • debian.org https://www.debian.org/security/2021/dsa-4882
    Third Party Advisory
  • oracle.com https://www.oracle.com//security-alerts/cpujul2021.html
    Third Party Advisory
  • oracle.com https://www.oracle.com/security-alerts/cpuoct2020.html
    Third Party Advisory

Remediation

  • github.com https://github.com/uclouvain/openjpeg/issues/1261
    PatchThird Party Advisory