CVE-2016-4796

Heap-based buffer overflow in the colorcmykto_rgb in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (crash) via a crafted .j2k file.

References

Affected packages

Git / github.com/uclouvain/openjpeg

Affected ranges

Type: GIT
Repo: https://github.com/uclouvain/openjpeg
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

162f6199c0cd3ec1c6c6dc65e41b2faab92b2d91

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-4796.json"

vanir_signatures

[
    {
        "id": "CVE-2016-4796-64fc458f",
        "target": {
            "function": "color_cmyk_to_rgb",
            "file": "src/bin/common/color.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://github.com/uclouvain/openjpeg/commit/162f6199c0cd3ec1c6c6dc65e41b2faab92b2d91",
        "digest": {
            "function_hash": "134464743987787230719671113372916798236",
            "length": 1551.0
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2016-4796-e267dae1",
        "target": {
            "file": "src/bin/common/color.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://github.com/uclouvain/openjpeg/commit/162f6199c0cd3ec1c6c6dc65e41b2faab92b2d91",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "281879827006156950804066750185371585500",
                "242510693724452804591160714773927432543",
                "139685648053095491543908164286238942877",
                "228032896656891271929285980984670012589"
            ]
        },
        "signature_type": "Line"
    }
]