PT-2017-13074

Name of the Vulnerable Software and Affected Versions JasPer version 2.0.12 Description The issue is related to a reachable assertion abort in the function jpc dequantize in jpc/jpc dec.c, which can lead to a remote denial of service attack. Recommendations For JasPer version 2.0.12, at the momen...

PT-2017-13070

Name of the Vulnerable Software and Affected Versions JasPer version 2.0.12 Description The issue is related to a reachable assertion abort in the function jpc pi nextrpcl in jpc/jpc t2cod.c. This can lead to a remote denial of service attack. Recommendations For JasPer version 2.0.12, consider...

PT-2017-13068

Name of the Vulnerable Software and Affected Versions JasPer version 2.0.12 Description The issue is related to a reachable assertion abort in the function jpc floorlog2 in jpc/jpc math.c. This can lead to a remote denial of service attack. Recommendations For JasPer version 2.0.12, consider...

CVE-2017-13748: Missing Release of Resource after Effective Lifetime

There are lots of memory leaks in JasPer 2.0.12, triggered in the function jasstrdup in base/jasstring.c, that will lead to a remote denial of service attack...

PT-2017-13066

Name of the Vulnerable Software and Affected Versions JasPer version 2.0.12 Description The issue is related to a reachable assertion abort in the function jpc dec process sot in jpc/jpc dec.c. This can lead to a remote denial of service attack by triggering an unexpected return value from jpc...

PT-2017-13069

Name of the Vulnerable Software and Affected Versions JasPer version 2.0.12 Description The issue is related to memory leaks in the jas strdup function located in base/jas string.c, which can lead to a remote denial of service attack. Recommendations For JasPer version 2.0.12, consider disabling...

CVE-2017-13751: Reachable Assertion

There is a reachable assertion abort in the function calcstepsizes in jpc/jpcdec.c in JasPer 2.0.12 that will lead to a remote denial of service attack...

CVE-2017-13746: Reachable Assertion

There is a reachable assertion abort in the function jpcdecprocesssiz in jpc/jpcdec.c:1297 in JasPer 2.0.12 that will lead to a remote denial of service attack...

CVE-2017-13745: Reachable Assertion

There is a reachable assertion abort in the function jpcdecprocesssot in jpc/jpcdec.c in JasPer 2.0.12 that will lead to a remote denial of service attack by triggering an unexpected jpcppmstabtostreams return value, a different vulnerability than CVE-2018-9154...

CVE-2017-13750: Reachable Assertion

There is a reachable assertion abort in the function jpcdecprocesssiz in jpc/jpcdec.c:1296 in JasPer 2.0.12 that will lead to a remote denial of service attack...

PT-2017-13072

Name of the Vulnerable Software and Affected Versions JasPer version 2.0.12 Description The issue is related to a reachable assertion abort in the function jpc dec process siz in jpc/jpc dec.c, which can lead to a remote denial of service attack. Recommendations For JasPer version 2.0.12, conside...

PT-2017-13073

Name of the Vulnerable Software and Affected Versions JasPer version 2.0.12 Description The issue is related to a reachable assertion abort in the function calcstepsizes in jpc/jpc dec.c, which can lead to a remote denial of service attack. Recommendations For JasPer version 2.0.12, consider...

CVE-2017-13752: Reachable Assertion

There is a reachable assertion abort in the function jpcdequantize in jpc/jpcdec.c in JasPer 2.0.12 that will lead to a remote denial of service attack...

CVE-2017-13747: Reachable Assertion

There is a reachable assertion abort in the function jpcfloorlog2 in jpc/jpcmath.c in JasPer 2.0.12 that will lead to a remote denial of service attack...

CVE-2017-13749: Reachable Assertion

There is a reachable assertion abort in the function jpcpinextrpcl in jpc/jpct2cod.c in JasPer 2.0.12 that will lead to a remote denial of service attack...

Double free

Double free vulnerability in the jasperimagestopload function in JasPer 1.900.17 allows remote attackers to cause a denial of service crash via a crafted JPEG 2000 image file...

CVE-2015-5203

Double free vulnerability in the jasperimagestopload function in JasPer 1.900.17 allows remote attackers to cause a denial of service crash via a crafted JPEG 2000 image file...

CVE-2015-5203

Double free vulnerability in the jasperimagestopload function in JasPer 1.900.17 allows remote attackers to cause a denial of service crash via a crafted JPEG 2000 image file...

CVE-2015-5203

CVE-2015-5203 is a double-free flaw in JasPer’s jasper_image_stop_load() used when processing certain JPEG 2000 images. Backed by multiple connected advisories, this vulnerability can allow a remote attacker to crash an application or, in some reports, potentially execute arbitrary code. Affected...

CVE-2015-5203

Double free vulnerability in the jasperimagestopload function in JasPer 1.900.17 allows remote attackers to cause a denial of service crash via a crafted JPEG 2000 image file...