p PatchFirst

CVE-2024-56826

CVE-2024-56826 · Openjpeg: heap buffer overflow in bin/common/color.c

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application crash or other undefined behavior.

CVSS 5.6 · Medium · EPSS 0.3% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • red hat enterprise linux 9

    Versions
    • ≥ 0:2.4.0-8.el9: Not affected (rpm)

    No fix published

  • red hat enterprise linux 10

    No fix published

  • red hat enterprise linux 6

    No fix published

  • red hat enterprise linux 7

    No fix published

  • red hat enterprise linux 8

    No fix published

  • openjpeg2 Debian:12

    Versions
    • 2.5.0-2
    Affected ranges
    • ECOSYSTEM: < 2.5.0-2+deb12u1

    Update to 2.5.0-2+deb12u1

  • openjpeg2 Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.5.3-1

    Update to 2.5.3-1

  • openjpeg2 Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.5.3-1

    Update to 2.5.3-1

  • ghostscript Ubuntu:Pro:16.04:LTS

    Versions
    • 9.16~dfsg~0-0ubuntu3
    • 9.16~dfsg~0-0ubuntu4
    • 9.18~dfsg~0-0ubuntu1
    • 9.18~dfsg~0-0ubuntu2
    • 9.18~dfsg~0-0ubuntu2.2
    • 9.18~dfsg~0-0ubuntu2.3
    • 9.18~dfsg~0-0ubuntu2.4
    • 9.18~dfsg~0-0ubuntu2.6
    • 9.18~dfsg~0-0ubuntu2.7
    • 9.18~dfsg~0-0ubuntu2.8
    • 9.18~dfsg~0-0ubuntu2.9
    • 9.25~dfsg+1-0ubuntu0.16.04.1
    • 9.25~dfsg+1-0ubuntu0.16.04.2
    • 9.25~dfsg+1-0ubuntu0.16.04.3
    • 9.26~dfsg+0-0ubuntu0.16.04.1
    • 9.26~dfsg+0-0ubuntu0.16.04.3
    • 9.26~dfsg+0-0ubuntu0.16.04.4
    • 9.26~dfsg+0-0ubuntu0.16.04.5
    • 9.26~dfsg+0-0ubuntu0.16.04.6
    • 9.26~dfsg+0-0ubuntu0.16.04.7
    • 9.26~dfsg+0-0ubuntu0.16.04.8
    • 9.26~dfsg+0-0ubuntu0.16.04.9
    • 9.26~dfsg+0-0ubuntu0.16.04.10
    • 9.26~dfsg+0-0ubuntu0.16.04.11
    • 9.26~dfsg+0-0ubuntu0.16.04.12
    • 9.26~dfsg+0-0ubuntu0.16.04.13
    • 9.26~dfsg+0-0ubuntu0.16.04.14
    • 9.26~dfsg+0-0ubuntu0.16.04.14+esm1
    • 9.26~dfsg+0-0ubuntu0.16.04.14+esm2
    • 9.26~dfsg+0-0ubuntu0.16.04.14+esm3
    • 9.26~dfsg+0-0ubuntu0.16.04.14+esm4
    • 9.26~dfsg+0-0ubuntu0.16.04.14+esm5
    • 9.26~dfsg+0-0ubuntu0.16.04.14+esm6
    • 9.26~dfsg+0-0ubuntu0.16.04.14+esm7
    • 9.26~dfsg+0-0ubuntu0.16.04.14+esm8
    Affected ranges
    • ECOSYSTEM: < 9.26~dfsg+0-0ubuntu0.16.04.14+esm9

    Update to 9.26~dfsg+0-0ubuntu0.16.04.14+esm9

  • openjpeg2 Ubuntu:Pro:16.04:LTS

    Versions
    • 2.1.0-2.1
    • 2.1.0-2.1ubuntu0.1
    • 2.1.2-1.1+deb9u2build0.1
    • 2.1.2-1.1+deb9u3build0.16.04.1
    • 2.1.2-1.1+deb9u3ubuntu0.1~esm1
    • 2.1.2-1.1+deb9u5build0.16.04.1
    • 2.1.2-1.1+deb9u5ubuntu0.1~esm1
    • 2.1.2-1.1+deb9u6build0.16.04.1
    • 2.1.2-1.1+deb9u6ubuntu0.1~esm1
    • 2.1.2-1.1+deb9u6ubuntu0.1~esm3
    • 2.1.2-1.1+deb9u6ubuntu0.1~esm4
    • 2.1.2-1.1+deb9u6ubuntu0.1~esm6
    Affected ranges
    • ECOSYSTEM: < 2.1.2-1.1+deb9u6ubuntu0.1~esm7

    Update to 2.1.2-1.1+deb9u6ubuntu0.1~esm7

  • blender Ubuntu:16.04:LTS

    Versions
    • 2.74+dfsg0-4build2
    • 2.75.a+dfsg0-2ubuntu2
    • 2.75.a+dfsg0-2ubuntu3
    • 2.76.b+dfsg0-3
    • 2.76.b+dfsg0-3build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • insighttoolkit4 Ubuntu:16.04:LTS

    Versions
    • 4.8.1-1ubuntu3
    • 4.8.1-1ubuntu4
    • 4.8.2-3.1ubuntu1
    • 4.9.0-3ubuntu2
    • 4.9.0-4ubuntu1
    • 4.9.0-4ubuntu1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • texmaker Ubuntu:16.04:LTS

    Versions
    • 4.4.1-1
    • 4.4.1-1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ghostscript Ubuntu:Pro:18.04:LTS

    Versions
    • 9.21~dfsg+1-0ubuntu3
    • 9.22~dfsg+1-0ubuntu1
    • 9.22~dfsg+1-0ubuntu1.1
    • 9.22~dfsg+1-0ubuntu1.2
    • 9.25~dfsg+1-0ubuntu0.18.04.1
    • 9.25~dfsg+1-0ubuntu0.18.04.2
    • 9.26~dfsg+0-0ubuntu0.18.04.1
    • 9.26~dfsg+0-0ubuntu0.18.04.3
    • 9.26~dfsg+0-0ubuntu0.18.04.4
    • 9.26~dfsg+0-0ubuntu0.18.04.5
    • 9.26~dfsg+0-0ubuntu0.18.04.6
    • 9.26~dfsg+0-0ubuntu0.18.04.7
    • 9.26~dfsg+0-0ubuntu0.18.04.8
    • 9.26~dfsg+0-0ubuntu0.18.04.9
    • 9.26~dfsg+0-0ubuntu0.18.04.10
    • 9.26~dfsg+0-0ubuntu0.18.04.11
    • 9.26~dfsg+0-0ubuntu0.18.04.12
    • 9.26~dfsg+0-0ubuntu0.18.04.13
    • 9.26~dfsg+0-0ubuntu0.18.04.14
    • 9.26~dfsg+0-0ubuntu0.18.04.15
    • 9.26~dfsg+0-0ubuntu0.18.04.16
    • 9.26~dfsg+0-0ubuntu0.18.04.17
    • 9.26~dfsg+0-0ubuntu0.18.04.18
    • 9.26~dfsg+0-0ubuntu0.18.04.18+esm1
    • 9.26~dfsg+0-0ubuntu0.18.04.18+esm2
    • 9.26~dfsg+0-0ubuntu0.18.04.18+esm3
    Affected ranges
    • ECOSYSTEM: < 9.26~dfsg+0-0ubuntu0.18.04.18+esm4

    Update to 9.26~dfsg+0-0ubuntu0.18.04.18+esm4

  • blender Ubuntu:18.04:LTS

    Versions
    • 2.78.c+dfsg0-2build1
    • 2.79+dfsg0-2build1
    • 2.79+dfsg0-3
    • 2.79+dfsg0-3build1
    • 2.79.b+dfsg0-1
    • 2.79.b+dfsg0-1ubuntu1.18.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • insighttoolkit4 Ubuntu:18.04:LTS

    Versions
    • 4.12.2-dfsg1-1ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • openjpeg2 Ubuntu:Pro:18.04:LTS

    Versions
    • 2.2.0-1
    • 2.3.0-1
    • 2.3.0-2build0.18.04.1
    • 2.3.0-2ubuntu0.1~esm1
    • 2.3.0-2+deb10u2build0.18.04.1
    • 2.3.0-2+deb10u2ubuntu0.1~esm1
    • 2.3.0-2+deb10u2ubuntu0.1~esm2
    • 2.3.0-2+deb10u2ubuntu0.1~esm3
    Affected ranges
    • ECOSYSTEM: < 2.3.0-2+deb10u2ubuntu0.1~esm4

    Update to 2.3.0-2+deb10u2ubuntu0.1~esm4

  • qtwebengine-opensource-src Ubuntu:Pro:18.04:LTS

    Versions
    • 5.9.1+dfsg-4
    • 5.9.1+dfsg-4ubuntu1
    • 5.9.2+dfsg-2ubuntu1
    • 5.9.3+dfsg-0ubuntu1
    • 5.9.4+dfsg-0ubuntu1
    • 5.9.5+dfsg-0ubuntu2
    • 5.9.5+dfsg-0ubuntu2+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • texmaker Ubuntu:Pro:18.04:LTS

    Versions
    • 4.5-1
    • 5.0.2-1
    • 5.0.2-1build1
    • 5.0.2-1build2
    • 5.0.2-1ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • openjpeg2 Ubuntu:20.04:LTS

    Versions
    • 2.3.0-2
    • 2.3.0-2build1
    • 2.3.1-1
    • 2.3.1-1ubuntu3
    • 2.3.1-1ubuntu4
    • 2.3.1-1ubuntu4.20.04.1
    • 2.3.1-1ubuntu4.20.04.2
    • 2.3.1-1ubuntu4.20.04.3
    Affected ranges
    • ECOSYSTEM: < 2.3.1-1ubuntu4.20.04.4

    Update to 2.3.1-1ubuntu4.20.04.4

  • blender Ubuntu:20.04:LTS

    Versions
    • 2.80+dfsg-3
    • 2.80+dfsg-3build1
    • 2.80+dfsg-4
    • 2.81.a+dfsg-5build3
    • 2.82+dfsg-1
    • 2.82+dfsg-1build1
    • 2.82.a+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • insighttoolkit4 Ubuntu:20.04:LTS

    Versions
    • 4.12.2-dfsg1-4.1ubuntu1
    • 4.13.2-dfsg1-1ubuntu1
    • 4.13.2-dfsg1-4ubuntu1
    • 4.13.2-dfsg1-6
    • 4.13.2-dfsg1-6ubuntu1
    • 4.13.2-dfsg1-8
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtwebengine-opensource-src Ubuntu:Pro:20.04:LTS

    Versions
    • 5.12.4+dfsg-1ubuntu1
    • 5.12.4+dfsg-1ubuntu3
    • 5.12.5+dfsg-3ubuntu1
    • 5.12.5+dfsg-6ubuntu2
    • 5.12.5+dfsg-7
    • 5.12.5+dfsg-7build1
    • 5.12.8+dfsg-0ubuntu1
    • 5.12.8+dfsg-0ubuntu1.1
    • 5.12.8+dfsg-0ubuntu1.1+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • texmaker Ubuntu:Pro:20.04:LTS

    Versions
    • 5.0.3-1build2
    • 5.0.3-1build3
    • 5.0.3-1build4
    • 5.0.3-1build5
    • 5.0.3-1ubuntu0.20.04.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →