CVE-2016-9572 — Vulnetix

Try Vulnetix Request Demo

CVE-2016-9572 PUBLISHED

A NULL pointer dereference flaw was found in the way openjpeg 2.1.2 decoded certain input images. Due to a logic error in the code responsible for decoding the input image, an application using openjpeg to process image data could crash when processing a crafted image.

EPSS 1.77% · 82.5th percentile

Risk Scores

EPSS Score

1.77%

82.5th percentile

Affected Products

Vendor	Product	Versions
Ubuntu:Pro:16.04:LTS	openjpeg	*, 0, 1:1.5.2-3.1
Ubuntu:16.04:LTS	openjpeg2	2.1.0-2.1, 0, 2.1.0-2.1ubuntu0.1
Ubuntu:14.04:LTS	openjpeg	0, 1.3+dfsg-4.7ubuntu1, 1.3+dfsg-4.6ubuntu2

Timeline

Sep 25, 2017 CVE Published
Feb 4, 2022 EPSS Score
Mar 28, 2022 EPSS Score
May 19, 2022 EPSS Score
Jul 10, 2022 EPSS Score
Sep 1, 2022 EPSS Score
Oct 23, 2022 EPSS Score
Dec 14, 2022 EPSS Score
Feb 4, 2023 EPSS Score
Mar 28, 2023 EPSS Score
May 19, 2023 EPSS Score
Jul 10, 2023 EPSS Score

References

https://ubuntu.com/security/CVE-2016-9572 third-party-advisory
https://github.com/uclouvain/openjpeg/issues/863 third-party-advisory
https://github.com/szukw000/openjpeg/commit/7b28bd2b723df6be09fe7791eba33147c1c47d0d third-party-advisory
https://www.cve.org/CVERecord?id=CVE-2016-9572 third-party-advisory

Open in Interactive Console →