-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability description directly points to the imagetopnm function in convert.c. The provided commit 2fa0fc61f2d546c8b67e7c5a9cbc61d98e1f7af0 modifies this exact function to add checks for component similarity. This indicates that the lack of such checks in the vulnerable version (OpenJPEG 2.1.2) could lead to the described NULL pointer dereference when processing a crafted J2K file with inconsistent component properties. The commit message also explicitly mentions fixing a heap buffer overflow by ensuring the alpha component has the same dimensions, which is a common cause of NULL pointer issues.