CVE-2021-3575CWE-787

CVE-2021-3575: vulnerability in OpenJPEG

Published · Updated

Follow this CVE+ Monitor openjpeg+ Monitor openjpeg2

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.5%
A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k file. An attacker could use this to execute arbitrary code with the permissions of the application compiled against openjpeg.
Affected products
n/a · OpenJPEG