CVE-2016-9115

Heap Buffer Over-read in function imagetotga of convert.c(jp2):942 in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k file.

• CWE-119

• http://www.securityfocus.com/bid/93977Third Party Advisory, VDB Entry
• https://github.com/uclouvain/openjpeg/issues/858Exploit, Vendor Advisory
• https://security.gentoo.org/glsa/201710-26
• http://www.securityfocus.com/bid/93977Third Party Advisory, VDB Entry
• https://github.com/uclouvain/openjpeg/issues/858Exploit, Vendor Advisory
• https://security.gentoo.org/glsa/201710-26

Published

Oct 30, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-9108Integer overflow in the js_regcomp function in regexp.c in A…7.5
• CVE-2016-9109Artifex Software MuJS allows attackers to cause a denial of …
• CVE-2016-9111Incorrect access control mechanisms in Citrix Receiver Deskt…
• CVE-2016-9112Floating Point Exception (aka FPE or divide by zero) in opj_…
• CVE-2016-9113There is a NULL pointer dereference in function imagetobmp o…
• CVE-2016-9114There is a NULL Pointer Access in function imagetopnm of con…
• CVE-2016-9116NULL Pointer Access in function imagetopnm of convert.c:2226…
• CVE-2016-9117NULL Pointer Access in function imagetopnm of convert.c(jp2)…
• CVE-2016-9118Heap Buffer Overflow (WRITE of size 4) in function pnmtoimag…
• CVE-2016-9119Cross-site scripting (XSS) vulnerability in the link dialogu…
• CVE-2016-9120Race condition in the ion_ioctl function in drivers/staging/…7.8
• CVE-2016-9121go-jose before 1.0.4 suffers from an invalid curve attack fo…