Published: 01/08/2018 Updated: 12/02/2023

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

A NULL pointer dereference flaw was found in the way openjpeg 2.1.2 decoded certain input images. Due to a logic error in the code responsible for decoding the input image, an application using openjpeg to process image data could crash when processing a crafted image.

Vulnerable Product	Search on Vulmon	Subscribe to Product
uclouvain openjpeg 2.1.2
debian debian linux 8.0

Debian Bug report logs - #851422 openjpeg2: CVE-2016-9572 CVE-2016-9573 Package: src:openjpeg2; Maintainer for src:openjpeg2 is Debian PhotoTools Maintainers <pkg-phototools-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sat, 14 Jan 2017 18:51:01 UTC Severity: grave Tags: ...

Multiple vulnerabilities in OpenJPEG, a JPEG 2000 image compression / decompression library, may result in denial of service or the execution of arbitrary code if a malformed JPEG 2000 file is processed For the stable distribution (jessie), these problems have been fixed in version 210-2+deb8u2 For the unstable distribution (sid), these problem ...

A NULL pointer dereference flaw was found in the way openjpeg 212 decoded certain input images Due to a logic error in the code responsible for decoding the input image, an application using openjpeg to process image data could crash when processing a crafted image ...

CWE-476 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9572 https://github.com/uclouvain/openjpeg/issues/863 https://github.com/szukw000/openjpeg/commit/7b28bd2b723df6be09fe7791eba33147c1c47d0d https://www.debian.org/security/2017/dsa-3768 https://security.gentoo.org/glsa/201710-26 http://www.securityfocus.com/bid/109233 https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851422 https://nvd.nist.gov https://www.debian.org/security/./dsa-3768 https://access.redhat.com/security/cve/cve-2016-9572

CVE-2016-9572

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect