NULL pointer dereference vulnerabilities in the imagetopnm function in convert.c, sycc444_to_rgb function in color.c, color_esycc_to_rgb function in color.c, and sycc422_to_rgb function in color.c in OpenJPEG before 2.2.0 allow remote attackers to cause a denial of service (application crash) via crafted j2k files. Upstream bug: https://github.com/uclouvain/openjpeg/issues/776 https://github.com/uclouvain/openjpeg/issues/784 https://github.com/uclouvain/openjpeg/issues/785 https://github.com/uclouvain/openjpeg/issues/792 References: https://bugs.gentoo.org/show_bug.cgi?id=629372
Created mingw-openjpeg tracking bugs for this issue: Affects: fedora-all [bug 1487379] Created mingw-openjpeg2 tracking bugs for this issue: Affects: fedora-all [bug 1487380] Created openjpeg tracking bugs for this issue: Affects: fedora-all [bug 1487378] Created openjpeg2 tracking bugs for this issue: Affects: epel-all [bug 1487381] Affects: fedora-all [bug 1487382]