CVE-2016-9573: High severity openjpeg vulnerability
An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2ktoimage tool. Converting a specially crafted JPEG2000 file to another format could cause the application to crash or, potentially, disclose some data from the heap.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2016-9573?
CVE-2016-9573 is an out-of-bounds read vulnerability found in OpenJPEG 2.1.2
How does CVE-2016-9573 affect OpenJPEG?
CVE-2016-9573 affects OpenJPEG 2.1.2 in the j2k_to_image tool, potentially causing the application to crash or disclose heap data when converting a specially crafted JPEG2000 file to another format.
What is the severity of CVE-2016-9573?
CVE-2016-9573 has a severity rating of 8.1 (High).
How can the CVE-2016-9573 vulnerability be fixed?
To fix CVE-2016-9573, update to OpenJPEG version 2.3.0-2+deb10u2, 2.4.0-3, or 2.5.0-2.
Where can I find more information about CVE-2016-9573?
You can find more information about CVE-2016-9573 at the following references: http://rhn.redhat.com/errata/RHSA-2017-0838.html, http://www.securityfocus.com/bid/97073, and https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9573.