CVE-2021-45935

MEDIO 5.5CVE-2021-45935 · Published 01/01/2022 · updated 17/06/2026

In breve

CVE-2021-45935 è una vulnerabilità MEDIO (CVSS 5.5) che riguarda grok (grok project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.91%, superiore al 60.2% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
grok grok_project	`= 9.5.0`	No fix yet

Description

Grok 9.5.0 has a heap-based buffer overflow in openhtj2k::T1OpenHTJ2K::decompress (called from std::__1::__packaged_task_func<std::__1::__bind<grk::T1DecompressScheduler::deco and std::__1::packaged_task<int).

References

bugs.chromium.org/p/oss-fuzz/issues/detail · Exploit
google/oss-fuzz-vulns · Exploit
osamu620/OpenHTJ2K · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free