Description
A vulnerability was found while fuzzing libbpg 0.9.7. It is a NULL pointer dereference issue due to missing check of the return value of function malloc in the BPG encoder. This vulnerability appeared while converting a malicious JPEG file to BPG.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fabrice Bellard | libbpg | 0.9.7 | — |
References
- 97963 vdb-entry
- [oss-security] 20170420 CVE-2017-2575 libbpg: NULL pointer dereference in image_alloc mailing-list