Heap-based Buffer Overflow in OpenJPEG Software from UCLouvain

CVE-2021-3575

What is CVE-2021-3575?

A heap-based buffer overflow vulnerability exists in OpenJPEG, specifically in the color.c file at sycc420_to_rgb. When processing a specially crafted .j2k file, this flaw allows attackers to execute arbitrary code with the same permissions as the application using OpenJPEG. This could potentially lead to unauthorized actions within the affected system. Users are advised to update to the latest version to mitigate risks associated with this vulnerability.

References