CVE-2016-3183

The sycc422trgb function in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted jpeg2000 file.

Database specific

{
    "unresolved_ranges": [
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:a:uclouvain:openjpeg:*:*:*:*:*:*:*:*"
            ],
            "vendor_product": "uclouvain:openjpeg",
            "extracted_events": [
                {
                    "last_affected": "2.1.0"
                }
            ]
        }
    ]
}

References

CVE-2016-3183

Affected packages