debian · CVE-2021-36089

Quick triage

View at Official debian advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2021-36089 not yet assigned priority: Debian including 1 source packages (libgrokj2k), 2 status rows across 2 suites (bookworm, sid): resolved 2.

Description:

Grok 7.6.6 through 9.2.0 has a heap-based buffer overflow in grk::FileFormatDecompress::apply_palette_clr (called from grk::FileFormatDecompress::applyColour).