CVE-2017-13753

JasPer (JPEG-2000 codec) is affected by two documented CVEs: CVE-2016-9396 (reachable assertion in JPC_NOMINALGAIN) and CVE-2017-1000050 (NULL pointer exception in jp2_encode). Multiple vendor advisories confirm affected products and fixes, e.g., Red Hat/CentOS (CESA RHSA-2018:3253) and IBM Power...

CVE-2016-9396

The JPCNOMINALGAIN function in jpc/jpct1cod.c in JasPer through 2.0.12 allows remote attackers to cause a denial of service JPCCOXRFT assertion failure via unspecified vectors...