First published: Sun Oct 30 2016(Updated: )
Heap Buffer Over-read in function imagetotga of convert.c(jp2):942 in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k file.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
uclouvain openjpeg | =2.1.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-9115 has a severity level classified as Denial of Service.
To fix CVE-2016-9115, upgrade OpenJPEG to version 2.1.3 or later.
CVE-2016-9115 affects OpenJPEG version 2.1.2.
The impact of CVE-2016-9115 is a potential Denial of Service when handling crafted j2k files.
CVE-2016-9115 exploit occurs through a heap buffer over-read in the imagetotga function of OpenJPEG.