CVE-2016-3182

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

The color_esycc_to_rgb function in bin/common/color.c in OpenJPEG before 2.1.1 allows attackers to cause a denial of service (memory corruption) via a crafted jpeg 2000 file.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.openwall.com/lists/oss-security/2016/03/16/16Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/09/27/1Mailing List, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1317826Issue Tracking, Patch, Third Party Advisory
https://github.com/uclouvain/openjpeg/issues/725Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/03/16/16Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/09/27/1Mailing List, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1317826Issue Tracking, Patch, Third Party Advisory
https://github.com/uclouvain/openjpeg/issues/725Third Party Advisory

Timeline

Published: Feb 20, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-31835.5The sycc422_t_rgb function in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (out-of-bounds re CVE-2016-31857.1The make_http_soap_request function in ext/soap/php_http.c in PHP before 5.4.44, 5.5.x before 5.5.28, 5.6.x before 5.6.12, and 7.x before 7.CVE-2016-31866.2Buffer overflow in the readextension function in gif2tiff.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (applicati CVE-2016-31877.3The Prepopulate module 7.x-2.x before 7.x-2.1 for Drupal allows remote attackers to modify the REQUEST superglobal array, and consequently h CVE-2016-31887.3The _prepopulate_request_walk function in the Prepopulate module 7.x-2.x before 7.x-2.1 for Drupal allows remote attackers to modify the (1)CVE-2016-31896.5Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 CVE-2016-31907.5The fill_xrgb32_lerp_opaque_spans function in cairo-image-compositor.c in cairo before 1.14.2 allows remote attackers to cause a denial of s CVE-2016-31919.8The compile_branch function in pcre_compile.c in PCRE 8.x before 8.39 and pcre2_compile.c in PCRE2 before 10.22 mishandles patterns containi CVE-2016-31926.5Cloudera Manager 5.x before 5.7.1 places Sensitive Data in cleartext Readable Files.CVE-2016-31935.4Cross-site scripting (XSS) vulnerability in the appliance web-application in Fortinet FortiManager 5.x before 5.0.12, 5.2.x before 5.2.6, an CVE-2016-31946.1Cross-site scripting (XSS) vulnerability in the address added page in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and For CVE-2016-31956.1Cross-site scripting (XSS) vulnerability in the Web-UI in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiAnalyzer 5