Lucene search

K

RedhatCVELIST:CVE-2021-3575

HistoryMar 04, 2022 - 5:20 p.m.

CVE-2021-3575

2022-03-0417:20:40

CWE-787

redhat

www.cve.org

8.2 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.2%

A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k file. An attacker could use this to execute arbitrary code with the permissions of the application compiled against openjpeg.

CNA Affected

[
  {
    "product": "OpenJPEG",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Afeects v2.4.0 and prior."
      }
    ]
  }
]

References

bugzilla.redhat.com/show_bug.cgi?id=1957616

github.com/uclouvain/openjpeg/issues/1347

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZ54FGM2IGAP4AWSJ22JKHOPHCR3FGYU/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QB6AI7CWXWMEDZIQY4LQ6DMIEXMDOHUP/

ubuntu.com/security/CVE-2021-3575

8.2 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.2%

Related for CVELIST:CVE-2021-3575

redhatcve1 nessus9 openvas6 debiancve1 mageia1 ubuntucve1 amazon2 alpinelinux1 slackware1 cve1 veracode1 prion1 osv3 nvd1 fedora4 redhat2 almalinux1 rocky1 oraclelinux1