There is a NULL Pointer Access in function imagetopnm of convert.c:1943(jp2) of OpenJPEG 2.1.2. image->comps[compno].data is not assigned a value after initialization(NULL). Impact is Denial of Service.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9114
Reference (s):
- BID:93979
- URL: http://www.securityfocus.com/bid/93979
- GENTOO:GLSA-201710-26
- URL: https://security.gentoo.org/glsa/201710-26
- https://github.com/uclouvain/openjpeg/issues/857