CVE-2016-9572 - A NULL pointer dereference flaw was found in the way openjpeg 2.1.2 decoded certain input images. Du

CVE-2016-9572

Summary

A NULL pointer dereference flaw was found in the way openjpeg 2.1.2 decoded certain input images. Due to a logic error in the code responsible for decoding the input image, an application using openjpeg to process image data could crash when processing a crafted image.

References

Vulnerable Configurations

cpe:2.3:a:uclouvain:openjpeg:2.1.2:*:*:*:*:*:*:*
cpe:2.3:a:uclouvain:openjpeg:2.1.2:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

CVSS

Base:	4.3 (as of 12-02-2023 - 23:27)
Impact:
Exploitability:

CWE

CWE-476

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	PARTIAL

cvss-vector via4

AV:N/AC:M/Au:N/C:N/I:N/A:P

refmap via4

bid	109233
confirm	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9572 https://github.com/szukw000/openjpeg/commit/7b28bd2b723df6be09fe7791eba33147c1c47d0d https://github.com/uclouvain/openjpeg/issues/863
debian	DSA-3768
gentoo	GLSA-201710-26
misc	https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html

Last major update

12-02-2023 - 23:27

Published

01-08-2018 - 16:29

Last modified

12-02-2023 - 23:27