Every CVE Search/ Get API key

OSV-2021-1344

Heap-buffer-overflow in openhtj2k::T1OpenHTJ2K::decompress

No score

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39021

Crash type: Heap-buffer-overflow WRITE 4
Crash state:
openhtj2k::T1OpenHTJ2K::decompress
std::__1::__packaged_task_func<std::__1::__bind<grk::T1DecompressScheduler::deco
std::__1::packaged_task<int

What each source reports

OSV No score

Heap-buffer-overflow in openhtj2k::T1OpenHTJ2K::decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39021

Crash type: Heap-buffer-overflow WRITE 4
Crash state:
openhtj2k::T1OpenHTJ2K::decompress
std::__1::__packaged_task_func<std::__1::__bind<grk::T1DecompressScheduler::deco
std::__1::packaged_task<int
Record
OSV-2021-1344
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
grok
OSS-Fuzz
Listed versions, plus commit ranges
v9.5.0v9.5.0.debianv9.6.0v9.7.0v9.7.1
Show 19 moreShow less
v9.7.2v9.7.3v9.7.4v9.7.5v9.7.5.debianv9.7.6v9.7.7v9.7.8v10.0.0v10.0.0.debianv10.0.1v10.0.2v10.0.3v10.0.4v10.0.5v10.0.5.debianv10.0.6v10.0.7v10.0.8
None known

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

OSV-2021-1344 is a vulnerability with no CVSS score yet in grok, published September 21, 2021. No source lists public exploit code. No source names a fixed version.

References

MoveEnter Open