CVE-2016-9573

State: Published
Severity: 6.5 Medium
Published: Aug 1, 2018
Updated: Aug 6, 2024
Reserved: Nov 23, 2016

Description

An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2k_to_image tool. Converting a specially crafted JPEG2000 file to another format could cause the application to crash or, potentially, disclose some data from the heap.

Scores

CVSS	Score	Vector	Source
3.0	6.5 Medium	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H	redhat

Weaknesses

CWE-125

Affected Products

Product	Versions
openjpegThe OpenJPEG Project	2.1.2Affected

References

https://github.com/uclouvain/openjpeg/issues/862
GLSA-201710-26vendor-advisory
97073vdb-entry
https://github.com/szukw000/openjpeg/commit/7b28bd2b723df6be09fe7791eba33147c1c47d0d
RHSA-2017:0838vendor-advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9573
DSA-3768vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.