p PatchFirst

CVE-2018-21010

CVE-2018-21010

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

OpenJPEG before 2.3.1 has a heap buffer overflow in color_apply_icc_profile in bin/common/color.c.

CVSS 8.8 · High · EPSS 2.1% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • openjpeg2 Debian:12

    Affected ranges
    • ECOSYSTEM: < 2.3.1-1

    Update to 2.3.1-1

  • openjpeg2 Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.3.1-1

    Update to 2.3.1-1

  • openjpeg2 Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.3.1-1

    Update to 2.3.1-1

  • openjpeg Ubuntu:14.04:LTS

    Versions
    • 1.3+dfsg-4.6ubuntu2
    • 1.3+dfsg-4.7ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • openjpeg2 Ubuntu:16.04:LTS

    Versions
    • 2.1.0-2.1
    • 2.1.0-2.1ubuntu0.1
    • 2.1.2-1.1+deb9u2build0.1
    • 2.1.2-1.1+deb9u3build0.16.04.1
    Affected ranges
    • ECOSYSTEM: < 2.1.2-1.1+deb9u5build0.16.04.1

    Update to 2.1.2-1.1+deb9u5build0.16.04.1

  • blender Ubuntu:16.04:LTS

    Versions
    • 2.74+dfsg0-4build2
    • 2.75.a+dfsg0-2ubuntu2
    • 2.75.a+dfsg0-2ubuntu3
    • 2.76.b+dfsg0-3
    • 2.76.b+dfsg0-3build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • insighttoolkit4 Ubuntu:16.04:LTS

    Versions
    • 4.8.1-1ubuntu3
    • 4.8.1-1ubuntu4
    • 4.8.2-3.1ubuntu1
    • 4.9.0-3ubuntu2
    • 4.9.0-4ubuntu1
    • 4.9.0-4ubuntu1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • openjpeg Ubuntu:Pro:16.04:LTS

    Versions
    • 1:1.5.2-3.1
    • 1:1.5.2-3.1ubuntu0.1~esm2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • texmaker Ubuntu:16.04:LTS

    Versions
    • 4.4.1-1
    • 4.4.1-1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • blender Ubuntu:18.04:LTS

    Versions
    • 2.78.c+dfsg0-2build1
    • 2.79+dfsg0-2build1
    • 2.79+dfsg0-3
    • 2.79+dfsg0-3build1
    • 2.79.b+dfsg0-1
    • 2.79.b+dfsg0-1ubuntu1.18.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • insighttoolkit4 Ubuntu:18.04:LTS

    Versions
    • 4.12.2-dfsg1-1ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtwebengine-opensource-src Ubuntu:Pro:18.04:LTS

    Versions
    • 5.9.1+dfsg-4
    • 5.9.1+dfsg-4ubuntu1
    • 5.9.2+dfsg-2ubuntu1
    • 5.9.3+dfsg-0ubuntu1
    • 5.9.4+dfsg-0ubuntu1
    • 5.9.5+dfsg-0ubuntu2
    • 5.9.5+dfsg-0ubuntu2+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • texmaker Ubuntu:Pro:18.04:LTS

    Versions
    • 4.5-1
    • 5.0.2-1
    • 5.0.2-1build1
    • 5.0.2-1build2
    • 5.0.2-1ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • blender Ubuntu:20.04:LTS

    Versions
    • 2.80+dfsg-3
    • 2.80+dfsg-3build1
    • 2.80+dfsg-4
    • 2.81.a+dfsg-5build3
    • 2.82+dfsg-1
    • 2.82+dfsg-1build1
    • 2.82.a+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • insighttoolkit4 Ubuntu:20.04:LTS

    Versions
    • 4.12.2-dfsg1-4.1ubuntu1
    • 4.13.2-dfsg1-1ubuntu1
    • 4.13.2-dfsg1-4ubuntu1
    • 4.13.2-dfsg1-6
    • 4.13.2-dfsg1-6ubuntu1
    • 4.13.2-dfsg1-8
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtwebengine-opensource-src Ubuntu:Pro:20.04:LTS

    Versions
    • 5.12.4+dfsg-1ubuntu1
    • 5.12.4+dfsg-1ubuntu3
    • 5.12.5+dfsg-3ubuntu1
    • 5.12.5+dfsg-6ubuntu2
    • 5.12.5+dfsg-7
    • 5.12.5+dfsg-7build1
    • 5.12.8+dfsg-0ubuntu1
    • 5.12.8+dfsg-0ubuntu1.1
    • 5.12.8+dfsg-0ubuntu1.1+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • texmaker Ubuntu:Pro:20.04:LTS

    Versions
    • 5.0.3-1build2
    • 5.0.3-1build3
    • 5.0.3-1build4
    • 5.0.3-1build5
    • 5.0.3-1ubuntu0.20.04.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • blender Ubuntu:22.04:LTS

    Versions
    • 2.93.3+dfsg-3
    • 2.93.5+dfsg-1
    • 2.93.5+dfsg-1build1
    • 3.0.1+dfsg-7
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • insighttoolkit4 Ubuntu:22.04:LTS

    Versions
    • 4.13.3withdata-dfsg1-4.1
    • 4.13.3withdata-dfsg2-1ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtwebengine-opensource-src Ubuntu:Pro:22.04:LTS

    Versions
    • 5.15.6+dfsg-1
    • 5.15.6+dfsg-2
    • 5.15.7+dfsg-2
    • 5.15.8+dfsg-1
    • 5.15.8+dfsg-1build1
    • 5.15.8+dfsg-1build2
    • 5.15.8+dfsg-2
    • 5.15.9+dfsg-1
    • 5.15.9+dfsg-1ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • texmaker Ubuntu:Pro:22.04:LTS

    Versions
    • 5.0.3-1build8
    • 5.0.3-1build9
    • 5.0.3-1ubuntu0.22.04.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • blender Ubuntu:24.04:LTS

    Versions
    • 3.6.2+dfsg-2ubuntu1
    • 3.6.2+dfsg-2ubuntu2
    • 4.0.2+dfsg-1ubuntu1
    • 4.0.2+dfsg-1ubuntu2
    • 4.0.2+dfsg-1ubuntu4
    • 4.0.2+dfsg-1ubuntu6
    • 4.0.2+dfsg-1ubuntu7
    • 4.0.2+dfsg-1ubuntu8
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtwebengine-opensource-src Ubuntu:Pro:24.04:LTS

    Versions
    • 5.15.15+dfsg-2
    • 5.15.15+dfsg-2build2
    • 5.15.15+dfsg-2ubuntu1
    • 5.15.16+dfsg-1
    • 5.15.16+dfsg-1ubuntu2
    • 5.15.16+dfsg-1ubuntu4
    • 5.15.16+dfsg-3
    • 5.15.16+dfsg-3ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →