CVEs-PoC/2021/CVE-2021-3575.md

CVE-2021-3575

Description

A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k file. An attacker could use this to execute arbitrary code with the permissions of the application compiled against openjpeg.

POC

Reference

• https://github.com/uclouvain/openjpeg/issues/1347

Github

• https://github.com/OzNetNerd/CheckovOutputProcessor
• https://github.com/bygregonline/devsec-fastapi-report
• https://github.com/robertsirc/sle-bci-demo
• https://github.com/w4zu/Debian_security