OpenJPEG prior to 2.3.1 has a heap buffer overflow in color_apply_icc_profile in bin/common/color.c.
uclouvain openjpeg
debian debian linux 8.0