Vulnerability Details CVE-2016-9580
An integer overflow vulnerability was found in tiftoimage function in openjpeg 2.1.2, resulting in heap buffer overflow.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 57.3%
CVSS Severity
CVSS v3 Score 3.3
CVSS v2 Score 6.8
References
- http://www.securityfocus.com/bid/94822
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9580
- https://github.com/szukw000/openjpeg/commit/cadff5fb6e73398de26a92e96d3d7cac893af255
- https://github.com/uclouvain/openjpeg/issues/871
- https://security.gentoo.org/glsa/201710-26
- http://www.securityfocus.com/bid/94822
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9580
- https://github.com/szukw000/openjpeg/commit/cadff5fb6e73398de26a92e96d3d7cac893af255
- https://github.com/uclouvain/openjpeg/issues/871
- https://security.gentoo.org/glsa/201710-26