CVE catalog

CVE-2016-9675

UBUNTU-CVE-2016-9675

Severity: High · CVSS 7.8CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Published: Dec 22, 2016, 9:59:00 PM UTC
Updated: Apr 22, 2026, 11:05:15 AM UTC
Source: [NVD] · [CVE record]
EPSS: 1.90% · Oct 25, 2026

openjpeg: A heap-based buffer overflow flaw was found in the patch for CVE-2013-6045. A crafted j2k image could cause the application to crash, or potentially execute arbitrary code.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Ubuntu	openjpeg	14.04	`1.3+dfsg-4.6ubuntu2`	vulnerable
Ubuntu	openjpeg	14.04	`1.3+dfsg-4.7ubuntu1`	vulnerable

Fixed-version evidence

OpenFactory catalog packages

No matching packages in this catalog.

Observed: Oct 23, 2026, 5:24:04 PM UTC

References

[https://ftp.suse.com/pub/projects/security/csaf/rhsa-2017_0838.json]
[https://osv.dev/vulnerability/UBUNTU-CVE-2016-9675]

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]