Back to search
CVE-2016-10505
Published: Aug 30, 2017
Modified: Aug 6, 2024
PUBLISHED
Description
NULL pointer dereference vulnerabilities in the imagetopnm function in convert.c, sycc444_to_rgb function in color.c, color_esycc_to_rgb function in color.c, and sycc422_to_rgb function in color.c in OpenJPEG before 2.2.0 allow remote attackers to cause a denial of service (application crash) via crafted j2k files.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
GLSA-201710-26
vendor-advisory
x_refsource_GENTOO
https://github.com/uclouvain/openjpeg/issues/784
x_refsource_CONFIRM
https://github.com/uclouvain/openjpeg/issues/776
x_refsource_CONFIRM
https://github.com/uclouvain/openjpeg/issues/785
x_refsource_CONFIRM
https://github.com/uclouvain/openjpeg/issues/792
x_refsource_CONFIRM
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now