heap-based buffer overflow issue

[prasadayush]

A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k file. An attacker could use this to execute arbitrary code with the permissions of the application compiled against openjpeg.

Below are the risk factors associated to this issue - Attack complexity: low, DoS - High, High severity, Remote execution

Vulnerability link - https://security-tracker.debian.org/tracker/CVE-2021-3575