CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-3575

A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k file. An attacker could use this to execute arbitrary code with the permissions of the application compiled against openjpeg.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 54.5%

CVSS Severity

CVSS v3 Score 7.8

CVSS v2 Score 6.8

References

Products affected by CVE-2021-3575

Uclouvain » Openjpeg » Version: N/A

cpe:2.3:a:uclouvain:openjpeg:-
Uclouvain » Openjpeg » Version: 1.0

cpe:2.3:a:uclouvain:openjpeg:1.0
Uclouvain » Openjpeg » Version: 1.1

cpe:2.3:a:uclouvain:openjpeg:1.1
Uclouvain » Openjpeg » Version: 1.2

cpe:2.3:a:uclouvain:openjpeg:1.2
Uclouvain » Openjpeg » Version: 1.3

cpe:2.3:a:uclouvain:openjpeg:1.3
Uclouvain » Openjpeg » Version: 1.4

cpe:2.3:a:uclouvain:openjpeg:1.4
Uclouvain » Openjpeg » Version: 1.5

cpe:2.3:a:uclouvain:openjpeg:1.5
Uclouvain » Openjpeg » Version: 1.5.1

cpe:2.3:a:uclouvain:openjpeg:1.5.1
Uclouvain » Openjpeg » Version: 1.5.2

cpe:2.3:a:uclouvain:openjpeg:1.5.2
Uclouvain » Openjpeg » Version: 2.0

cpe:2.3:a:uclouvain:openjpeg:2.0
Uclouvain » Openjpeg » Version: 2.0.0

cpe:2.3:a:uclouvain:openjpeg:2.0.0
Uclouvain » Openjpeg » Version: 2.0.1

cpe:2.3:a:uclouvain:openjpeg:2.0.1
Uclouvain » Openjpeg » Version: 2.1

cpe:2.3:a:uclouvain:openjpeg:2.1
Uclouvain » Openjpeg » Version: 2.1.0

cpe:2.3:a:uclouvain:openjpeg:2.1.0
Uclouvain » Openjpeg » Version: 2.1.1

cpe:2.3:a:uclouvain:openjpeg:2.1.1
Uclouvain » Openjpeg » Version: 2.1.2

cpe:2.3:a:uclouvain:openjpeg:2.1.2
Uclouvain » Openjpeg » Version: 2.2.0

cpe:2.3:a:uclouvain:openjpeg:2.2.0
Uclouvain » Openjpeg » Version: 2.3.0

cpe:2.3:a:uclouvain:openjpeg:2.3.0
Uclouvain » Openjpeg » Version: 2.3.1

cpe:2.3:a:uclouvain:openjpeg:2.3.1
Uclouvain » Openjpeg » Version: 2.4.0

cpe:2.3:a:uclouvain:openjpeg:2.4.0
Fedoraproject » Fedora » Version: 33

cpe:2.3:o:fedoraproject:fedora:33
Fedoraproject » Fedora » Version: 34

cpe:2.3:o:fedoraproject:fedora:34
Redhat » Enterprise Linux » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux:6.0
Redhat » Enterprise Linux » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux:7.0
Redhat » Enterprise Linux » Version: 8.0

cpe:2.3:o:redhat:enterprise_linux:8.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-3575

Products

Pricing

Contact Us