CVE-2015-8871

Critical

Published: 21/09/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A use-after-free vulnerability in the opj_j2k_write_mco function in j2k.c in OpenJPEG before version 2.1.1 allows remote attackers to have unspecified impact via unknown vectors.

Risk Assessment

Organizations may be exposed to unauthorized access or other undesirable actions due to this vulnerability.

Recommendation

It is recommended to update OpenJPEG to version 2.1.1 or later to mitigate this vulnerability.

Original NVD description (English source)

Use-after-free vulnerability in the opj_j2k_write_mco function in j2k.c in OpenJPEG before 2.1.1 allows remote attackers to have unspecified impact via unknown vectors.