CVE-2016-9572

EUVD-2016-10378
A NULL pointer dereference flaw was found in the way openjpeg 2.1.2 decoded certain input images. Due to a logic error in the code responsible for decoding the input image, an application using openjpeg to process image data could crash when processing a crafted image.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.9 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
redhatCNA
5.9 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 82%
Affected Products (NVD)
VendorProductVersion
uclouvainopenjpeg
2.1.2
debiandebian_linux
8.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
openjpeg2
bookworm
2.5.0-2
fixed
bullseye
2.4.0-3
fixed
sid
2.5.0-2
fixed
trixie
2.5.0-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
openjpeg
artful
dne
bionic
dne
cosmic
dne
disco
dne
focal
dne
jammy
dne
kinetic
dne
trusty
ignored
xenial
ignored
openjpeg2
artful
ignored
bionic
not-affected
focal
not-affected
jammy
not-affected
kinetic
not-affected
precise
dne
trusty
dne
xenial
Fixed 2.1.2-1.1+deb9u2build0.1
released
yakkety
ignored
zesty
ignored
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/109233
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9572
https://github.com/szukw000/openjpeg/commit/7b28bd2b723df6be09fe7791eba33147c1c47d0d
https://github.com/uclouvain/openjpeg/issues/863
https://security.gentoo.org/glsa/201710-26
https://www.debian.org/security/2017/dsa-3768
https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
http://www.securityfocus.com/bid/109233
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9572
https://github.com/szukw000/openjpeg/commit/7b28bd2b723df6be09fe7791eba33147c1c47d0d
https://github.com/uclouvain/openjpeg/issues/863
https://security.gentoo.org/glsa/201710-26
https://www.debian.org/security/2017/dsa-3768
https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html