CVE-2021-3575CWE-787

A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k file

published March 4, 2022

CVSS
—
EPSS
2%
Percentile
74.9
In the wild
Unconfirmed
What it is

A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k file. An attacker could use this to execute arbitrary code with the permissions of the application compiled against openjpeg.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01549 · 74.9th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2022-03-04T17:20Z
EPSS history
Timeline
  • 04 MAR 17:20Z
    A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k file
    cvelistv5