CVE-2016-3182
Fixed in a distro release EPSS 2%
The color_esycc_to_rgb function in bin/common/color.c in OpenJPEG before 2.1.1 allows attackers to cause a denial of service (memory corruption) via a crafted jpeg 2000 file.
Products: uclouvain openjpeg
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | openjpeg2 | 2.1.1-1 |
| Debian 13 | openjpeg2 | 2.1.1-1 |
| Debian 14 | openjpeg2 | 2.1.1-1 |