CVE-2021-39515: Null Pointer Dereference
Published Sep 20, 2021
·Updated
An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function SampleInterleavedLSScan::ParseMCU() located in sampleinterleavedlsscan.cpp. It allows an attacker to cause Denial of Service.
Affected Software
1 affected component
jpeg libjpeg<=2020021
Event History
Sep 20, 2021
CVE Published
via MITRE·03:26 PM
Data Sourced
via MITRE·03:26 PM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-39515?
CVE-2021-39515 is classified as a Denial of Service vulnerability.
2
How do I fix CVE-2021-39515?
To fix CVE-2021-39515, upgrade to a version of libjpeg that is newer than 2020021.
3
What causes the issue in CVE-2021-39515?
CVE-2021-39515 is caused by a NULL pointer dereference in the SampleInterleavedLSScan::ParseMCU() function.
4
Which software is affected by CVE-2021-39515?
CVE-2021-39515 affects libjpeg versions up to and including 2020021.
5
What types of attacks can CVE-2021-39515 enable?
CVE-2021-39515 can enable attackers to execute Denial of Service attacks against applications using vulnerable versions of libjpeg.