← Back

CVE-2016-9675

nvd nist
Published: Dec 22, 2016Modified: May 6, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

openjpeg: A heap-based buffer overflow flaw was found in the patch for CVE-2013-6045. A crafted j2k image could cause the application to crash, or potentially execute arbitrary code.

Affected (11)

Uclouvain
1 product
Openjpeg
Redhat
4 products
Enterprise Linux
Enterprise Linux For Ibm Z Systems
Enterprise Linux For Power Big Endian
Enterprise Linux For Scientific Computing
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Openjpeg
Before 1.5.2
Configuration B
10 vulnerable
Vulnerable SoftwareAffected Versions
Redhat
Enterprise Linux
Version 6.0
Enterprise Linux
Version 7.0
Enterprise Linux
Version 7.3
Enterprise Linux
Version 7.4
Enterprise Linux
Version 7.5
Enterprise Linux
Version 7.6
Enterprise Linux
Version 7.7
Enterprise Linux For Ibm Z Systems
Version 6.0
Enterprise Linux For Power Big Endian
Version 6.0
Enterprise Linux For Scientific Computing
Version 6.0

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (8)

Source: cve@mitre.org
PatchThird Party Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry

Timeline

No history available yet.