CVE-2018-21010: Buffer Overflow
Published Sep 5, 2019
·Updated
Last updated 24 July 2024
Other sources
OpenJPEG before 2.3.1 has a heap buffer overflow in colorapplyiccprofile in bin/common/color.c.
Affected Software
3 affected componentsFixes available
uclouvain openjpeg<2.3.1
Debian Debian Linux=8.0
debian/openjpeg2
2.4.0-32.4.0-3+deb11u12.5.0-2+deb12u12.5.3-2
Remediation
Patch Available
Event History
Sep 5, 2019
CVE Published
via MITRE·12:52 PM
Data Sourced
via MITRE·12:52 PM
Description
Jan 11, 2024
Data Sourced
via Launchpad·11:00 PM
Description
Sep 16, 2024
Data Sourced
via Ubuntu·01:23 AM
RemedyDescriptionSeverityAffected Software
Jan 30, 2025
Data Sourced
via Debian·01:55 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is CVE-2018-21010?
CVE-2018-21010 is a vulnerability in OpenJPEG before 2.3.1 that has a heap buffer overflow in color_apply_icc_profile in bin/common/color.c.
2
How severe is CVE-2018-21010?
CVE-2018-21010 has a severity rating of 8.8, which is considered high.
3
What software is affected by CVE-2018-21010?
OpenJPEG versions 2.1.2-1.1+ and 2.3.0-2+deb10u2, 2.4.0-3, and 2.5.0-2 are affected.
4
How do I fix CVE-2018-21010 in Ubuntu?
To fix CVE-2018-21010 in Ubuntu, update the openjpeg2 package to version 2.1.2-1.1+ or later.
5
How do I fix CVE-2018-21010 in Debian?
To fix CVE-2018-21010 in Debian, update the openjpeg2 package to version 2.3.0-2+deb10u2, 2.4.0-3, or 2.5.0-2.