Beware! You Can Get Hacked Just by Opening a 'JPEG 2000' Image

While the flaw was found and patched, it's the last sentence that caught my eye and sent me down the rabbit hole. CVSS is the acronym for The Common Vulnerability Scoring System, which "provides an open framework for communicating the characteristics and impacts of IT vulnerabilities." And here is the rabbit hole:
https://nvd.nist.gov/cvss.cfm