Search for packages
| purl | pkg:alpm/archlinux/openjpeg2@2.5.0-3 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 3.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-h74a-huud-aaan
Aliases: CVE-2021-3575 |
A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k file. An attacker could use this to execute arbitrary code with the permissions of the application compiled against openjpeg. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-03-28T07:43:53.977951+00:00 | Arch Linux Importer | Affected by | VCID-h74a-huud-aaan | https://security.archlinux.org/AVG-2850 | 36.0.0 |
| 2024-09-18T01:59:02.587709+00:00 | Arch Linux Importer | Affected by | VCID-h74a-huud-aaan | https://security.archlinux.org/AVG-2850 | 34.0.1 |
| 2024-01-03T22:25:21.095033+00:00 | Arch Linux Importer | Affected by | VCID-h74a-huud-aaan | https://security.archlinux.org/AVG-2850 | 34.0.0rc1 |