CVE-2016-3182

The color_esycc_to_rgb function in bin/common/color.c in OpenJPEG before 2.1.1 allows attackers to cause a denial of service (memory corruption) via a crafted jpeg 2000 file.

Score

CVSS 3.1 5.5 Medium

Status

Modified - cve@mitre.org

Published

2020-02-20

Last modified

2024-08-05

Weaknesses

CWE-119

Affected products

• Openjpeg (Uclouvain)

References

• http://www.openwall.com/lists/oss-security/2016/03/16/16
• http://www.openwall.com/lists/oss-security/2016/09/27/1
• https://bugzilla.redhat.com/show_bug.cgi?id=1317826
• https://github.com/uclouvain/openjpeg/issues/725