CVE-2016-9114

HIGH 7.5EPSS 3.1%

There is a NULL Pointer Access in function imagetopnm of convert.c:1943(jp2) of OpenJPEG 2.1.2. image->comps[compno].data is not assigned a value after initialization(NULL). Impact is Denial of Service.

CVSS v3.0: 7.5 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v2.0: 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS: 3.08% chance of exploitation in the next 30 days, 87th percentile
Published: 2016-10-30
Updated: 2024-08-06

Proof-of-concept exploits (1)

uclouvain/openjpeg/issues/857

References

Related