Openjpeg · Openjpeg · CVE-2016-9573
**Name of the Vulnerable Software and Affected Versions**
OpenJPEG version 2.1.2
**Description**
An out-of-bounds read issue was found in the j2k to image tool. Converting a specially crafted JPEG2000 file to another format could cause the application to crash or, potentially, disclose some data from the heap.
**Recommendations**
For OpenJPEG version 2.1.2, consider updating to a newer version that contains a fix for this issue, as using a specially crafted JPEG2000 file could lead to application crashes or potential data disclosure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.