CVE-2016-9113: Null Pointer Dereference
Published Oct 30, 2016
·Updated
There is a NULL pointer dereference in function imagetobmp of convertbmp.c:980 of OpenJPEG 2.1.2. image->comps[0].data is not assigned a value after initialization(NULL). Impact is Denial of Service.
Affected Software
1 affected component
uclouvain openjpeg=2.1.2
Event History
Oct 30, 2016
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-9113?
CVE-2016-9113 has a severity that can lead to Denial of Service due to a NULL pointer dereference.
2
How do I fix CVE-2016-9113?
To fix CVE-2016-9113, you should upgrade OpenJPEG to version 2.1.3 or later where the issue is addressed.
3
What software is affected by CVE-2016-9113?
CVE-2016-9113 specifically affects OpenJPEG version 2.1.2.
4
What vulnerabilities does CVE-2016-9113 introduce?
CVE-2016-9113 introduces a NULL pointer dereference vulnerability that can crash the application handling images.
5
What is the potential impact of CVE-2016-9113?
The potential impact of CVE-2016-9113 is Denial of Service, leading to application crashes when processing specific image files.