AZL-44193
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-44193.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-44193
- Upstream
- Published
- 2020-06-29T21:15:14Z
- Modified
- 2026-04-01T05:15:30.521782Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H CVSS Calculator
- Summary
- CVE-2020-15389 affecting package openjpeg2 2.3.1-12
- Details
-
jp2/opjdecompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid and invalid files in a directory operated on by the decompressor. Triggering a double-free may also be possible. This is related to calling opjimage_destroy twice.
- References