The openjpeg library was vulnerable to a crash when converting images due to a NULL pointer dereference in readpnmheader() (CVE-2016-7445).