CVE-2016-9572mediumCWE-476

CVE-2016-9572: medium-severity vulnerability in The OpenJPEG Project openjpeg

Published · Updated

Follow this CVE+ Monitor openjpeg+ Monitor openjpeg2

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.9epss 2.2%
A NULL pointer dereference flaw was found in the way openjpeg 2.1.2 decoded certain input images. Due to a logic error in the code responsible for decoding the input image, an application using openjpeg to process image data could crash when processing a crafted image.
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
The OpenJPEG Project · openjpeg
Related CVEs — The OpenJPEG Project openjpeg

In the same product, most dangerous first.

CVE-2016-9573MEDIUMCVE-2016-9573EPSS 2.5%