A flaw was found in OpenJPEG. Specially crafted input file can lead to an out-of-bounds read in opj_t2_encode_packet function in openjp2/t2.c. Reference: https://github.com/uclouvain/openjpeg/issues/1297
Created mingw-openjpeg2 tracking bugs for this issue: Affects: fedora-all [bug 1907688] Created openjpeg tracking bugs for this issue: Affects: fedora-all [bug 1907687] Created openjpeg2 tracking bugs for this issue: Affects: epel-7 [bug 1907685] Affects: fedora-all [bug 1907686]
Acknowledgments: Name: zodf0055980 (SQLab NCTU Taiwan)
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s): https://access.redhat.com/security/cve/cve-2020-27843
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2021:4251 https://access.redhat.com/errata/RHSA-2021:4251