Null Pointer Dereference in BPG Encoder of Libbpg by Libbpg

CVE-2017-2575

What is CVE-2017-2575?

A vulnerability identified in libbpg version 0.9.7 allows a NULL pointer dereference, stemming from a failure to verify the return value of the malloc function in the BPG encoder. By exploiting this flaw, attackers can potentially manipulate the conversion of specially crafted JPEG files into BPG format, leading to application crashes or unforeseen behavior.

References