CVE-2020-8112: Debian Linux

High severity, CVSS 8.8. EPSS: 3.6% chance of exploitation in the next 30 days.

opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851.

Affected products

• Debian Debian Linux: version 8.0 only
• Uclouvain Openjpeg: version 2.3.1 only

Published 2020-01-28. Last modified 2026-06-17.