CVE-2016-7445: Null Pointer Dereference
Published Oct 3, 2016
·Updated
convert.c in OpenJPEG before 2.1.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors involving the variable s.
Affected Software
3 affected componentsFixes available
uclouvain openjpeg<=2.1.1
openSUSE Leap=42.1
debian/openjpeg2
2.4.0-32.4.0-3+deb11u12.5.0-2+deb12u12.5.3-2
Remediation
Patch Available
Event History
Oct 3, 2016
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Jan 11, 2024
Data Sourced
via Launchpad·10:31 PM
Description
Sep 16, 2024
Data Sourced
via Ubuntu·01:47 AM
RemedyDescriptionSeverityAffected Software
Feb 3, 2025
Data Sourced
via Debian·02:42 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-7445?
The severity of CVE-2016-7445 is high with a severity value of 7.5.
2
How does CVE-2016-7445 affect OpenJPEG?
CVE-2016-7445 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) in OpenJPEG.
3
What is the remedy for CVE-2016-7445 in Ubuntu?
The remedy for CVE-2016-7445 in Ubuntu is to upgrade to version 2.1.2 or higher of the openjpeg2 package.
4
What is the remedy for CVE-2016-7445 in Debian?
The remedy for CVE-2016-7445 in Debian is to upgrade to version 2.3.0-2+deb10u2, 2.4.0-3, or 2.5.0-2 of the openjpeg2 package.
5
Where can I find more information about CVE-2016-7445?
You can find more information about CVE-2016-7445 on the CVE Mitre website, the Openwall OSS-Security mailing list, and the Ubuntu Security Notices.