CVE-2016-10505: Null Pointer Dereference
NULL pointer dereference vulnerabilities in the imagetopnm function in convert.c, sycc444torgb function in color.c, coloresycctorgb function in color.c, and sycc422torgb function in color.c in OpenJPEG before 2.2.0 allow remote attackers to cause a denial of service (application crash) via crafted j2k files.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-10505?
CVE-2016-10505 is classified as a denial of service vulnerability due to null pointer dereference, which can cause application crashes.
How do I fix CVE-2016-10505?
To fix CVE-2016-10505, upgrade OpenJPEG to version 2.2.0 or later.
Which software versions are affected by CVE-2016-10505?
CVE-2016-10505 affects OpenJPEG versions up to and including 2.1.2.
What type of attack does CVE-2016-10505 facilitate?
CVE-2016-10505 can be exploited by remote attackers to cause a denial of service.
What functions are involved in CVE-2016-10505?
CVE-2016-10505 involves vulnerabilities in the imagetopnm, sycc444_to_rgb, color_esycc_to_rgb, and sycc422_to_rgb functions in OpenJPEG.