CVE-2018-21010 PUBLISHED

OpenJPEG before 2.3.1 has a heap buffer overflow in color_apply_icc_profile in bin/common/color.c.

EPSS 0.85% · 74.7th percentile

Risk Scores

EPSS Score
0.85%
74.7th percentile

Affected Products

VendorProductVersions
Ubuntu:20.04:LTSblender0, 2.82.a+dfsg-1, 2.82+dfsg-1build1
Ubuntu:22.04:LTStexmaker0, 5.0.3-1build9, 5.0.3-1build8
Ubuntu:22.04:LTSblender0, 3.0.1+dfsg-7, 2.93.5+dfsg-1build1
Ubuntu:14.04:LTSopenjpeg1.3+dfsg-4.7ubuntu1, 0, 1.3+dfsg-4.6ubuntu2
Ubuntu:20.04:LTStexmaker5.0.3-1build3, 0, 5.0.3-1build2
Ubuntu:22.04:LTSqtwebengine-opensource-src5.15.9+dfsg-1, 0, 5.15.6+dfsg-1
Ubuntu:18.04:LTSinsighttoolkit40, 4.12.2-dfsg1-1ubuntu1
Ubuntu:24.04:LTSqtwebengine-opensource-src5.15.16+dfsg-1ubuntu2, 5.15.16+dfsg-1, 5.15.16+dfsg-3
Ubuntu:20.04:LTSinsighttoolkit44.13.2-dfsg1-6, 4.13.2-dfsg1-6ubuntu1, 4.13.2-dfsg1-8
Ubuntu:18.04:LTStexmaker0, 5.0.2-1build1, 5.0.2-1build2
Ubuntu:16.04:LTSopenjpeg20, 2.1.0-2.1ubuntu0.1, 2.1.2-1.1+deb9u3build0.16.04.1
Ubuntu:16.04:LTStexmaker4.4.1-1, 0, 4.4.1-1.1
Ubuntu:25.10blender0, 4.3.2+dfsg-2ubuntu1, 4.3.2+dfsg-2ubuntu2
Ubuntu:20.04:LTSqtwebengine-opensource-src5.12.8+dfsg-0ubuntu1, 0, 5.12.4+dfsg-1ubuntu1
Ubuntu:25.10texmaker5.1.3+dfsg-3, 5.1.3+dfsg-3build1, 0
Ubuntu:18.04:LTSqtwebengine-opensource-src5.9.3+dfsg-0ubuntu1, 5.9.2+dfsg-2ubuntu1, 5.9.1+dfsg-4ubuntu1
Ubuntu:18.04:LTSblender2.79.b+dfsg0-1, 0, 2.78.c+dfsg0-2build1
Ubuntu:24.04:LTSblender3.6.2+dfsg-2ubuntu2, 0, 3.6.2+dfsg-2ubuntu1
Ubuntu:25.10qtwebengine-opensource-src5.15.19+dfsg2-1, 0, 5.15.18+dfsg-2
Ubuntu:16.04:LTSinsighttoolkit44.9.0-4ubuntu1, 4.8.1-1ubuntu4, 4.9.0-4ubuntu1.1

…and 4 more

Timeline

References

Open in Interactive Console →