CVE-2016-2213: Ffmpeg

Medium severity, CVSS 6.5. EPSS: 1.9% chance of exploitation in the next 30 days.

The jpeg2000_decode_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.6 allows remote attackers to cause a denial of service (out-of-bounds array read access) via crafted JPEG 2000 data.

Affected products

• Ffmpeg Ffmpeg: up to and including 2.8.5

Published 2016-02-03. Last modified 2026-06-17.