CVE-2021-3575

Name
CVE-2021-3575
Description
A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k file. An attacker could use this to execute arbitrary code with the permissions of the application compiled against openjpeg.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=1957616
Exploit https://github.com/uclouvain/openjpeg/issues/1347
Third Party Advisory https://ubuntu.com/security/CVE-2021-3575
FEDORA https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QB6AI7CWXWMEDZIQY4LQ6DMIEXMDOHUP/
FEDORA https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EZ54FGM2IGAP4AWSJ22JKHOPHCR3FGYU/
secalert@redhat.com https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZ54FGM2IGAP4AWSJ22JKHOPHCR3FGYU/
secalert@redhat.com https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QB6AI7CWXWMEDZIQY4LQ6DMIEXMDOHUP/
af854a3a-2127-422b-91ae-364da2661108 https://lists.debian.org/debian-lts-announce/2025/04/msg00002.html

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:uclouvain:openjpeg:*:*:*:*:*:*:*:* openjpeg >= None <= 2.4.0

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
openjpeg edge-main 2.5.0-r0 Francesco Colista <fcolista@alpinelinux.org> fixed
openjpeg edge-main 2.4.0-r4 Francesco Colista <fcolista@alpinelinux.org> possibly vulnerable
openjpeg edge-main 2.4.0-r3 Francesco Colista <fcolista@alpinelinux.org> possibly vulnerable
openjpeg edge-main 2.4.0-r2 Francesco Colista <fcolista@alpinelinux.org> possibly vulnerable
openjpeg edge-main 2.4.0-r1 Francesco Colista <fcolista@alpinelinux.org> possibly vulnerable
openjpeg edge-main 2.4.0-r0 None possibly vulnerable
openjpeg edge-main 2.3.1-r6 None possibly vulnerable
openjpeg edge-main 2.3.1-r5 None possibly vulnerable
openjpeg edge-main 2.3.1-r3 None possibly vulnerable
openjpeg edge-main 2.3.0-r3 None possibly vulnerable
openjpeg edge-main 2.3.0-r2 None possibly vulnerable
openjpeg edge-main 2.3.0-r1 None possibly vulnerable
openjpeg edge-main 2.3.0-r0 None possibly vulnerable
openjpeg edge-main 2.2.0-r2 None possibly vulnerable
openjpeg edge-main 2.2.0-r1 None possibly vulnerable
openjpeg edge-main 2.1.2-r1 None possibly vulnerable
openjpeg 3.22-main 2.5.0-r0 None fixed
openjpeg 3.22-main 2.4.0-r1 None possibly vulnerable
openjpeg 3.22-main 2.4.0-r0 None possibly vulnerable
openjpeg 3.22-main 2.3.1-r6 None possibly vulnerable
openjpeg 3.22-main 2.3.1-r5 None possibly vulnerable
openjpeg 3.22-main 2.3.1-r3 None possibly vulnerable
openjpeg 3.22-main 2.3.0-r3 None possibly vulnerable
openjpeg 3.22-main 2.3.0-r2 None possibly vulnerable
openjpeg 3.22-main 2.3.0-r1 None possibly vulnerable
openjpeg 3.22-main 2.3.0-r0 None possibly vulnerable
openjpeg 3.22-main 2.2.0-r2 None possibly vulnerable
openjpeg 3.22-main 2.2.0-r1 None possibly vulnerable
openjpeg 3.22-main 2.1.2-r1 None possibly vulnerable
openjpeg 3.21-main 2.5.0-r0 None fixed
openjpeg 3.21-main 2.4.0-r1 None possibly vulnerable
openjpeg 3.21-main 2.4.0-r0 None possibly vulnerable
openjpeg 3.21-main 2.3.1-r6 None possibly vulnerable
openjpeg 3.21-main 2.3.1-r5 None possibly vulnerable
openjpeg 3.21-main 2.3.1-r3 None possibly vulnerable
openjpeg 3.21-main 2.3.0-r3 None possibly vulnerable
openjpeg 3.21-main 2.3.0-r2 None possibly vulnerable
openjpeg 3.21-main 2.3.0-r1 None possibly vulnerable
openjpeg 3.21-main 2.3.0-r0 None possibly vulnerable
openjpeg 3.21-main 2.2.0-r2 None possibly vulnerable
openjpeg 3.21-main 2.2.0-r1 None possibly vulnerable
openjpeg 3.21-main 2.1.2-r1 None possibly vulnerable
openjpeg 3.20-main 2.5.0-r0 None fixed
openjpeg 3.20-main 2.4.0-r1 None possibly vulnerable
openjpeg 3.20-main 2.4.0-r0 None possibly vulnerable
openjpeg 3.20-main 2.3.1-r6 None possibly vulnerable
openjpeg 3.20-main 2.3.1-r5 None possibly vulnerable
openjpeg 3.20-main 2.3.1-r3 None possibly vulnerable
openjpeg 3.20-main 2.3.0-r3 None possibly vulnerable
openjpeg 3.20-main 2.3.0-r2 None possibly vulnerable
openjpeg 3.20-main 2.3.0-r1 None possibly vulnerable
openjpeg 3.20-main 2.3.0-r0 None possibly vulnerable
openjpeg 3.20-main 2.2.0-r2 None possibly vulnerable
openjpeg 3.20-main 2.2.0-r1 None possibly vulnerable
openjpeg 3.20-main 2.1.2-r1 None possibly vulnerable
openjpeg 3.19-main 2.5.0-r0 None fixed
openjpeg 3.19-main 2.4.0-r1 None possibly vulnerable
openjpeg 3.19-main 2.4.0-r0 None possibly vulnerable
openjpeg 3.19-main 2.3.1-r6 None possibly vulnerable
openjpeg 3.19-main 2.3.1-r5 None possibly vulnerable
openjpeg 3.19-main 2.3.1-r3 None possibly vulnerable
openjpeg 3.19-main 2.3.0-r3 None possibly vulnerable
openjpeg 3.19-main 2.3.0-r2 None possibly vulnerable
openjpeg 3.19-main 2.3.0-r1 None possibly vulnerable
openjpeg 3.19-main 2.3.0-r0 None possibly vulnerable
openjpeg 3.19-main 2.2.0-r2 None possibly vulnerable
openjpeg 3.19-main 2.2.0-r1 None possibly vulnerable
openjpeg 3.19-main 2.1.2-r1 None possibly vulnerable
openjpeg 3.18-main 2.5.0-r0 None fixed
openjpeg 3.17-main 2.5.0-r0 Francesco Colista <fcolista@alpinelinux.org> fixed
openjpeg 3.12-main 2.4.0-r1 Francesco Colista <fcolista@alpinelinux.org> possibly vulnerable