Published: 30/10/2016 Updated: 09/09/2020

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

There is a NULL Pointer Access in function imagetopnm of convert.c:1943(jp2) of OpenJPEG 2.1.2. image->comps[compno].data is not assigned a value after initialization(NULL). Impact is Denial of Service.

Vulnerable Product	Search on Vulmon	Subscribe to Product
uclouvain openjpeg 2.1.2

Debian Bug report logs - #844554 openjpeg2: CVE-2016-9115 Package: src:openjpeg2; Maintainer for src:openjpeg2 is Debian PhotoTools Maintainers <pkg-phototools-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 16 Nov 2016 20:27:11 UTC Severity: important Tags: fixed-upst ...

Debian Bug report logs - #844556 openjpeg2: CVE-2016-9117 Package: src:openjpeg2; Maintainer for src:openjpeg2 is Debian PhotoTools Maintainers <pkg-phototools-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 16 Nov 2016 20:33:02 UTC Severity: important Tags: fixed-upst ...

Debian Bug report logs - #844555 openjpeg2: CVE-2016-9116 Package: src:openjpeg2; Maintainer for src:openjpeg2 is Debian PhotoTools Maintainers <pkg-phototools-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 16 Nov 2016 20:27:22 UTC Severity: important Tags: fixed-upst ...

Debian Bug report logs - #844552 openjpeg2: CVE-2016-9113 Package: src:openjpeg2; Maintainer for src:openjpeg2 is Debian PhotoTools Maintainers <pkg-phototools-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 16 Nov 2016 20:27:04 UTC Severity: important Tags: security, ...

Debian Bug report logs - #844553 openjpeg2: CVE-2016-9114 Package: src:openjpeg2; Maintainer for src:openjpeg2 is Debian PhotoTools Maintainers <pkg-phototools-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 16 Nov 2016 20:27:08 UTC Severity: important Tags: security, ...

There is a NULL Pointer Access in function imagetopnm of convertc:1943(jp2) of OpenJPEG 212 image->comps[compno]data is not assigned a value after initialization(NULL) Impact is Denial of Service ...

There is a NULL pointer access in the imagetopnm function of convertc:1943(jp2) of OpenJPEG 212 image->comps[compno]data is not assigned a value after initialization(NULL) which is leading to an application crash ...

CWE-476 https://github.com/uclouvain/openjpeg/issues/857 http://www.securityfocus.com/bid/93979 https://security.gentoo.org/glsa/201710-26 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=844554 https://access.redhat.com/security/cve/cve-2016-9114 https://security.archlinux.org/CVE-2016-9114

CVE-2016-9114

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect