NULL Pointer Dereference in imagetobmp function of OpenJPEG 2.1.2: Denial of Service Vulnerability

CVE-2016-9113 · MEDIUM Severity

AV:N/AC:L/AU:N/C:N/I:N/A:P

There is a NULL pointer dereference in function imagetobmp of convertbmp.c:980 of OpenJPEG 2.1.2. image->comps[0].data is not assigned a value after initialization(NULL). Impact is Denial of Service.

Learn more about our Web Application Penetration Testing UK.