CVE-2016-9573
Medium
Description
An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2k_to_image tool. Converting a specially crafted JPEG2000 file to another format could cause the application to crash or, potentially, disclose some data from the heap.
SeverityMedium
CVSS6.5
Exploit probability—
Product
Uclouvain Openjpeg
PublishedAug 1, 2018
First seenAug 1, 2018
Weakness typeCWE-125Out-of-bounds read
How to fix
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| uclouvain openjpeg | 2.1.2 | — |
| redhat enterprise_linux_desktop | 7.0 | — |
| redhat enterprise_linux_server | 7.0 | — |
| redhat enterprise_linux_server_aus | 7.3, 7.4 | — |
| redhat enterprise_linux_server_eus | 7.3, 7.4, 7.5 | — |
| redhat enterprise_linux_workstation | 7.0 | — |
| debian debian_linux | 8.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.