Medium severity6.5NVD Advisory· Published Aug 30, 2017· Updated May 13, 2026
CVE-2016-10505
CVE-2016-10505
Description
NULL pointer dereference vulnerabilities in the imagetopnm function in convert.c, sycc444_to_rgb function in color.c, color_esycc_to_rgb function in color.c, and sycc422_to_rgb function in color.c in OpenJPEG before 2.2.0 allow remote attackers to cause a denial of service (application crash) via crafted j2k files.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- github.com/uclouvain/openjpeg/issues/776nvdIssue TrackingPatchThird Party Advisory
- github.com/uclouvain/openjpeg/issues/784nvdIssue TrackingPatchThird Party Advisory
- github.com/uclouvain/openjpeg/issues/785nvdIssue TrackingPatchThird Party Advisory
- github.com/uclouvain/openjpeg/issues/792nvdIssue TrackingPatchThird Party Advisory
- security.gentoo.org/glsa/201710-26nvd
News mentions
0No linked articles in our index yet.