Heap-based buffer overflow in the colorcmykto_rgb in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (crash) via a crafted .j2k file.
[
{
"id": "CVE-2016-4796-64fc458f",
"signature_type": "Function",
"source": "https://github.com/uclouvain/openjpeg/commit/162f6199c0cd3ec1c6c6dc65e41b2faab92b2d91",
"target": {
"file": "src/bin/common/color.c",
"function": "color_cmyk_to_rgb"
},
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 1551.0,
"function_hash": "134464743987787230719671113372916798236"
}
},
{
"id": "CVE-2016-4796-e267dae1",
"signature_type": "Line",
"source": "https://github.com/uclouvain/openjpeg/commit/162f6199c0cd3ec1c6c6dc65e41b2faab92b2d91",
"target": {
"file": "src/bin/common/color.c"
},
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"281879827006156950804066750185371585500",
"242510693724452804591160714773927432543",
"139685648053095491543908164286238942877",
"228032896656891271929285980984670012589"
],
"threshold": 0.9
}
}
]