NULL Pointer Dereference

libjasper.so is vulnerable to NULL Pointer Dereference. The vulnerability is due to jp2_decode function in jp2_dec.c as there is no validation for the index obtained through the chantocmptlut array before it is used to access and set component types. An attacker can exploit this via specially crafted JP2 image file to reference an invalid component. This situation can potentially lead to out-of-bounds memory access and result a Crash/Denial of Service.