{"action":"Upgrade libgrokj2k to 9.7.5-1 or later.","affected":[{"fixed":"9.7.5-1","introduced":"0"}],"component":"libgrokj2k","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["9.7.5-1"],"id":"tcs_01M5NG30M9CF3JZMX5WBV9FKX6","modified_at":"2026-10-23T18:04:17.062547525Z","published_at":"2022-01-01T01:15:08.680Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2021-45935","https://security-tracker.debian.org/tracker/CVE-2021-45935"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2021-45935","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2021-45935"}],"summary":"Grok 9.5.0 has a heap-based buffer overflow in openhtj2k::T1OpenHTJ2K::decompress (called from std::__1::__packaged_task_func<std::__1::__bind<grk::T1DecompressScheduler::deco and std::__1::packaged_t"}