CVE-2012-1499

HIGH · CVSS 9.3 EPSS 5.14%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2012-04-11 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2012-1499

Severity

HIGH

CVSS

9.3

EPSS

5.14%

Original Filing — NVD Description

The JPEG 2000 codec (jp2.c) in OpenJPEG before 1.5 allows remote attackers to execute arbitrary code via a crafted palette index in a CMAP record of a JPEG image, which triggers memory corruption, aka "out-of heap-based buffer write."