| Package | Affected versions | Patched versions |
|---|---|---|
| openjpeg | ≤ 2.4.0 |
A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k file. An attacker could use this to execute arbitrary code with the permissions of the application compiled against openjpeg.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free