Lucene search

K
osvGoogleOSV:CVE-2021-3575
HistoryMar 04, 2022 - 6:15 p.m.

CVE-2021-3575

2022-03-0418:15:08
Google
osv.dev
15
cve-2021-3575
openjpeg
color.c
sycc420_to_rgb
arbitrary code execution
application permissions
software vulnerability

EPSS

0.003

Percentile

70.1%

A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k file. An attacker could use this to execute arbitrary code with the permissions of the application compiled against openjpeg.