CVE-2016-9115
MEDIUMOpenJPEG 2.1.2 - Memory Corruption
Title source: llmDescription
Heap Buffer Over-read in function imagetotga of convert.c(jp2):942 in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k file.
Scores
CVSS v3
6.5
EPSS
0.0037
EPSS Percentile
58.7%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Classification
CWE
CWE-119
Status
published
Affected Products (2)
uclouvain/openjpeg
n/a/n/a
Timeline
Published
Oct 30, 2016
Tracked Since
Feb 18, 2026