An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2k_to_image tool.

Published 8 y ago 2018-08-01 · modified 4 mo ago 2026-06-17 · JSON

CVSS

6.5

v3.0 · CNA

CISA KEV

not known exploited

EPSS

2.5%

percentile 85%

Public exploits

none known

An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2k_to_image tool. Converting a specially crafted JPEG2000 file to another format could cause the application to crash or, potentially, disclose some data from the heap.

Exploit prediction (EPSS)

2.47% probability of exploitation in the next 30 days, higher than 85% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
CNA	3.0	6.5	`CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H`
CNA	3.0	6.5	`CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H`
NVD	3.0	8.1	`CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H`
NVD	2.0	5.8	`AV:N/AC:M/Au:N/C:P/I:N/A:P`

Affected products

The OpenJPEG Project openjpeg

Classification

Weakness

CWE-125 Out-of-bounds Read

References

github.com /uclouvain/openjpeg/issues/862 · x_refsource_CONFIRM, x_transferred
security.gentoo.org /glsa/201710-26 · vendor-advisory, x_refsource_GENTOO, x_transferred
securityfocus.com /bid/97073 · vdb-entry, x_refsource_BID, x_transferred
github.com /szukw000/openjpeg/commit/7b28bd2b723df6be09fe7791eba33147c1c47d0d · x_refsource_CONFIRM, x_transferred
rhn.redhat.com /errata/RHSA-2017-0838.html · vendor-advisory, x_refsource_REDHAT, x_transferred
bugzilla.redhat.com /show_bug.cgi?id=CVE-2016-9573 · x_refsource_CONFIRM, x_transferred
debian.org /security/2017/dsa-3768 · vendor-advisory, x_refsource_DEBIAN, x_transferred

Sources

CVE List: CVE-2016-9573
NVD: CVE-2016-9573

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.