CVE-2016-9580

State: Published
Severity: 3.3 Low
Published: Aug 1, 2018
Updated: Aug 6, 2024
Reserved: Nov 23, 2016

Description

An integer overflow vulnerability was found in tiftoimage function in openjpeg 2.1.2, resulting in heap buffer overflow.

Scores

CVSS	Score	Vector	Source
3.0	3.3 Low	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L	redhat

Weaknesses

CWE-190
CWE-122

Affected Products

Product	Versions
openjpeg2The OpenJPEG Project	2.1.2Affected

References

https://github.com/uclouvain/openjpeg/issues/871
GLSA-201710-26vendor-advisory
94822vdb-entry
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9580
https://github.com/szukw000/openjpeg/commit/cadff5fb6e73398de26a92e96d3d7cac893af255

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.