CVE-2016-9572

A NULL pointer dereference flaw was found in the way openjpeg 2.1.2 decoded certain input images. Due to a logic error in the code responsible for decoding the input image, an application using openjpeg to process image data could crash when processing a crafted image.

References

Affected packages

Debian:11 / openjpeg2

Package

Name: openjpeg2
Purl: pkg:deb/debian/openjpeg2?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.2-1.1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / openjpeg2

Package

Name: openjpeg2
Purl: pkg:deb/debian/openjpeg2?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.2-1.1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / openjpeg2

Package

Name: openjpeg2
Purl: pkg:deb/debian/openjpeg2?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.2-1.1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/szukw000/openjpeg

Affected ranges

Type: GIT
Repo: https://github.com/szukw000/openjpeg
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

7b28bd2b723df6be09fe7791eba33147c1c47d0d

Type: GIT
Repo: https://github.com/uclouvain/openjpeg
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

1f1e968269bbd7eaade7955892a6d8c281b91df2

Affected versions

v2.*

v2.1.1

v2.1.2