CVE-2021-36089

Grok vulnerability CVE-2021-36089 affects Grok versions 7.6.6–9.2.0 with a heap-based buffer overflow in grk::FileFormatDecompress::apply_palette_clr (called from grk::FileFormatDecompress::applyColour). The root cause is a heap-based overflow in the palette color application path. Affected compo...