VDB

CVE-2018-21010

CVE-2018-21010 PUBLISHED

OpenJPEG before 2.3.1 has a heap buffer overflow in color_apply_icc_profile in bin/common/color.c.

EPSS 0.84% · 75.1th percentile

Risk Scores

EPSS Score
0.84%
75.1th percentile

Affected Products

VendorProductVersions
Ubuntu:20.04:LTSblender0, 2.80+dfsg-3build1, 2.80+dfsg-4
Ubuntu:22.04:LTStexmaker5.0.3-1build9, 0, 5.0.3-1build8
Ubuntu:22.04:LTSblender0, *, *
Ubuntu:14.04:LTSopenjpeg0, 1.3+dfsg-4.6ubuntu2, *
Ubuntu:20.04:LTStexmaker0, 5.0.3-1build2, 5.0.3-1build3
Ubuntu:22.04:LTSqtwebengine-opensource-src0, 5.15.9+dfsg-1, 5.15.8+dfsg-1build2
Ubuntu:18.04:LTSinsighttoolkit40, 4.12.2-dfsg1-1ubuntu1
Ubuntu:24.04:LTSqtwebengine-opensource-src5.15.16+dfsg-1, 5.15.15+dfsg-2ubuntu1, 5.15.15+dfsg-2
Ubuntu:20.04:LTSinsighttoolkit44.13.2-dfsg1-6, 4.13.2-dfsg1-1ubuntu1, 4.12.2-dfsg1-4.1ubuntu1
Ubuntu:18.04:LTStexmaker0, 4.5-1, 5.0.2-1
Ubuntu:16.04:LTSopenjpeg22.1.0-2.1, 0, 2.1.0-2.1ubuntu0.1
Ubuntu:16.04:LTStexmaker4.4.1-1.1, 0, 4.4.1-1
Ubuntu:25.10blender4.3.2+dfsg-2ubuntu1, 4.3.2+dfsg-2ubuntu2, 0
Ubuntu:20.04:LTSqtwebengine-opensource-src5.12.5+dfsg-7build1, 5.12.5+dfsg-7, 5.12.5+dfsg-6ubuntu2
Ubuntu:25.10texmaker0, 5.1.3+dfsg-3, 5.1.3+dfsg-3build1
Ubuntu:18.04:LTSqtwebengine-opensource-src5.9.3+dfsg-0ubuntu1, 5.9.4+dfsg-0ubuntu1, 5.9.5+dfsg-0ubuntu2
Ubuntu:18.04:LTSblender2.79+dfsg0-2build1, 2.79.b+dfsg0-1, 2.79.b+dfsg0-1ubuntu1.18.04.1
Ubuntu:24.04:LTSblender4.0.2+dfsg-1ubuntu2, 4.0.2+dfsg-1ubuntu4, 4.0.2+dfsg-1ubuntu6
Ubuntu:25.10qtwebengine-opensource-src5.15.18+dfsg-2build1, 5.15.19+dfsg2-1, *
Ubuntu:16.04:LTSinsighttoolkit40, 4.8.1-1ubuntu4, 4.9.0-3ubuntu2

…and 4 more

Timeline

  • Sep 5, 2019 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Aug 24, 2021 EPSS Score
  • Oct 26, 2021 EPSS Score
  • Dec 27, 2021 EPSS Score
  • May 2, 2022 EPSS Score
  • Jul 3, 2022 EPSS Score
  • Sep 5, 2022 EPSS Score
  • Nov 6, 2022 EPSS Score
  • Jan 8, 2023 EPSS Score
  • Mar 11, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›