CVE-2016-8332 describes a buffer overflow vulnerability in OpenJPEG 2.1.1, specifically within its JPEG2000 image file format parser, affecting products utilizing the uclouvain openjpeg library. This flaw allows for arbitrary code execution when a user opens a specially crafted JPEG2000 image, often embedded within PDF documents. With a CVSS score of 7.8 (HIGH), the vulnerability has a low attack complexity but requires user interaction, leading to potential high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation, nor publicly available exploit code in Metasploit or ExploitDB, the vulnerability has garnered some community discussion and media coverage, indicating awareness within the security community.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2.1.1CPE matchmatch criteria | cpe:2.3:a:uclouvain:openjpeg:2.1.1:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.