CVE-2016-9113

There is a NULL pointer dereference in function imagetobmp of convertbmp.c:980 of OpenJPEG 2.1.2. image->comps[0].data is not assigned a value after initialization(NULL). Impact is Denial of Service.

CVSS v3.0

7.5 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

3.05% chance of exploitation in the next 30 days, 87th percentile

Published

2016-10-30

Updated

2024-08-06

Proof-of-concept exploits (1)

• uclouvain/openjpeg/issues/856

References

• CVE Record
• NVD entry

Related

• CVE-2016-7163
• CVE-2016-9112
• CVE-2016-9114
• CVE-2016-9115
• CVE-2016-9116
• CVE-2016-9117