Search for vulnerabilities
Vulnerability details: VCID-zvpt-7d36-9bg4
Vulnerability ID VCID-zvpt-7d36-9bg4
Aliases CVE-2016-5139
Summary openjpeg: Heap overflow in parsing of JPEG2000 precincts
Status Published
Exploitability 0.5
Weighted Severity 7.9
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (2)
CWE-190 Integer Overflow or Wraparound
CWE-122 Heap-based Buffer Overflow
System Score Found at
cvssv3 8.8 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5139.json
epss 0.01429 https://api.first.org/data/v1/epss?cve=CVE-2016-5139
epss 0.01429 https://api.first.org/data/v1/epss?cve=CVE-2016-5139
epss 0.01429 https://api.first.org/data/v1/epss?cve=CVE-2016-5139
epss 0.01429 https://api.first.org/data/v1/epss?cve=CVE-2016-5139
epss 0.01429 https://api.first.org/data/v1/epss?cve=CVE-2016-5139
epss 0.01429 https://api.first.org/data/v1/epss?cve=CVE-2016-5139
epss 0.01429 https://api.first.org/data/v1/epss?cve=CVE-2016-5139
epss 0.01429 https://api.first.org/data/v1/epss?cve=CVE-2016-5139
epss 0.01429 https://api.first.org/data/v1/epss?cve=CVE-2016-5139
epss 0.01429 https://api.first.org/data/v1/epss?cve=CVE-2016-5139
epss 0.01429 https://api.first.org/data/v1/epss?cve=CVE-2016-5139
epss 0.01429 https://api.first.org/data/v1/epss?cve=CVE-2016-5139
epss 0.01429 https://api.first.org/data/v1/epss?cve=CVE-2016-5139
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5139.json
https://api.first.org/data/v1/epss?cve=CVE-2016-5139
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5139
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5140
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5141
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5142
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5143
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5144
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5145
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5146
1363982 https://bugzilla.redhat.com/show_bug.cgi?id=1363982
RHSA-2016:1580 https://access.redhat.com/errata/RHSA-2016:1580
RHSA-2017:0559 https://access.redhat.com/errata/RHSA-2017:0559
RHSA-2017:0838 https://access.redhat.com/errata/RHSA-2017:0838
No exploits are available.
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5139.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.79695
EPSS Score 0.01429
Published At June 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-01T13:08:53.143454+00:00 RedHat Importer Import https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5139.json 36.1.3