CVE-2016-1924

The opjtgtreset function in OpenJpeg 2016.1.18 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted JPEG 2000 image...

Heap overflow

Heap-based buffer overflow in the opjj2kupdateimagedata function in OpenJpeg 2016.1.18 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted JPEG 2000 image...

CVE-2016-1923

Heap-based buffer overflow in the opjj2kupdateimagedata function in OpenJpeg 2016.1.18 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted JPEG 2000 image...

CVE-2016-1924

CVE-2016-1924 affects OpenJPEG (OpenJpeg/OpenJPEG2) up to at least 2016.1.18. The vulnerability is in opj_tgt_reset and allows a remote attacker to trigger an out-of-bounds read via a crafted JPEG 2000 image, potentially causing an application crash/denial of service. Public advisories note multi...

CVE-2016-1923

Heap-based buffer overflow in the opjj2kupdateimagedata function in OpenJpeg 2016.1.18 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted JPEG 2000 image...

CVE-2016-1924

The opjtgtreset function in OpenJpeg 2016.1.18 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted JPEG 2000 image...

CVE-2016-1923

CVE-2016-1923 affects OpenJpeg (OpenJPEG) via a heap-based buffer overflow in opj_j2k_update_image_data in version 2016.1.18, permitting a remote attacker to trigger an out-of-bounds read and crash the app when parsing crafted JPEG 2000 images. Public advisories in the connected documents indicat...

CVE-2016-1924

The opjtgtreset function in OpenJpeg 2016.1.18 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted JPEG 2000 image...

openSUSE Security Update : ffmpeg (openSUSE-2016-26)

This update to ffmpeg 2.8.4 fixes the following issues : - CVE-2015-8661: Denial of service via crafted .mov file boo960385 - CVE-2015-8662: Denial of service via crafted JPEG 2000 data boo960384 - CVE-2015-8663: Denial of service via crafted H.264 data boo960383 %NASLMINLEVEL 70300 C Tenable...

JasPer Denial of Service Vulnerability

JasPer a report generation tool. A denial of service vulnerability exists in JasPer version 1.900.1 that allows remote attackers to cause a denial of service via a crafted JPEG 2000 image...

CVE-2016-1867

The jpcpinextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted JPEG 2000 image...

CVE-2016-1867

The jpcpinextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted JPEG 2000 image...

Out-of-bounds

The jpcpinextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted JPEG 2000 image...

CVE-2016-1867

The jpcpinextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted JPEG 2000 image...

CVE-2016-1867

The CVE entry CVE-2016-1867 describes a denial-of-service via an out-of-bounds read in JasPer 1.900.1 when processing crafted JPEG 2000 images. Connected sources show a wider set of JasPer vulnerabilities affecting multiple products across distributions (CVE-2015-5203, -5221, -2016-8654, -2016-86...

CVE-2016-0936

Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via crafted JPEG 2000...

CVE-2016-0936

Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via crafted JPEG 2000...

Memory corruption

Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via crafted JPEG 2000...

CVE-2016-0936

Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via crafted JPEG 2000...

FreeBSD : ffmpeg -- multiple vulnerabilities (4bae544d-06a3-4352-938c-b3bcbca89298)

NVD reports : The ffdwtdecode function in libavcodec/jpeg2000dwt.c in FFmpeg before 2.8.4 does not validate the number of decomposition levels before proceeding with Discrete Wavelet Transform decoding, which allows remote attackers to cause a denial of service out-of-bounds array access or...