2043 matches found
CVE-2016-8887
The jp2colrdestroy function in libjasper/jp2/jp2cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service NULL pointer dereference...
CVE-2016-9390
The jasseq2dcreate function in jasseq.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service assertion failure via a crafted image file...
CVE-2016-9398
The jpcfloorlog2 function in jpcmath.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service assertion failure via unspecified vectors...
CVE-2016-9262
JasPer contains a vulnerability CVE-2016-9262: two integer overflows in jas_realloc (base/jas_malloc.c) and mem_resize (base/jas_stream.c) in versions prior to 1.900.22, allowing remote attackers to trigger a denial of service via a crafted image that also leads to use-after-free conditions. The ...
CVE-2016-9391
JasPer (CVE-2016-9391): The jpc_bitstream_getbits function in jpc_bs.c of JasPer before 2.0.10 allows remote attackers to cause a denial of service (assertion failure) via a very large integer. This is the asserted under the CVE-2016-9391 entry and is corroborated by connected Nessus/NVD referenc...
CVE-2016-9397
CVE-2016-9397 is related to JasPer. The description specifies that the vulnerability exists in the jpc_dequantize function of jpc_dec.c in JasPer 1.900.13, where an attacker can trigger a denial of service (assertion failure) via unspecified vectors. The Connected documents (Nessus/OpenVAS entrie...
CVE-2016-9262
Multiple integer overflows in the 1 jasrealloc function in base/jasmalloc.c and 2 memresize function in base/jasstream.c in JasPer before 1.900.22 allow remote attackers to cause a denial of service via a crafted image, which triggers use after free vulnerabilities...
CVE-2016-8886
The jasmalloc function in libjasper/base/jasmalloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted file, which triggers a memory allocation failure...
CVE-2016-8885
The bmpgetdata function in libjasper/bmp/bmpdec.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service NULL pointer dereference by calling the imginfo command with a crafted BMP image...
CVE-2016-9389
CVE-2016-9389 affects JasPer library; the flaw is in the jpc_irct and jpc_iict functions of jpc_mct.c, allowing remote denial of service via assertion failure when using JasPer versions before 1.900.14. The issue is concrete and tied to the library version and specific functions. A fix is to upgr...
CVE-2016-9396
CVE-2016-9396 and CVE-2017-1000050 affect JasPer, with confirmed issues in JPC_NOMINALGAIN() and jp2_encode() that can lead to denial of service. Public disclosures and updates reference JasPer vulnerabilities across multiple vendors/advisories (e.g., USN-3693-1, RHSA-2018:3253, CentOS advisory, ...
CVE-2016-9394
CVE-2016-9394 affects JasPer JPEG-2000 library. The jas_seq2d_create function in jas_seq.c is vulnerable to assertion-failure denial of service when processing crafted image files, for JasPer versions before 1.900.17. The connected documents corroborate that historical JasPer vulnerabilities incl...
CVE-2016-9390
CVE-2016-9390 – JasPer JPEG 2000 library : The vulnerability is in jas_seq2d_create in JasPer before 1.900.14, where a crafted image file can trigger an assertion failure and cause a denial of service. Affected component is the JasPer library’s JPEG 2000 handling; root cause is an assertion failu...
CVE-2016-9393
CVE-2016-9393 : The jpc_pi_nextrpcl function in jpc_t2cod.c within JasPer before 1.900.17 can cause a denial of service (assertion failure) when processing a crafted file. This is the only vulnerability described in the initial entry; the connected documents corroborate JasPer-related CVEs but do...
CVE-2016-9399
CVE-2016-9399 affects JasPer, with the description noting a vulnerability in the calcstepsizes function of jpc_dec.c in JasPer 1.900.22 that allows remote denial of service via assertion failure. Connected documents (Red Hat advisories and OpenVAS entries) list CVE-2016-9399 among Jasper-related ...
CVE-2016-8886
CVE-2016-8886 affects the JasPer library (libjasper), specifically the jas_malloc function in base/jas_malloc.c. Before version 1.900.11, processing a crafted file could trigger a memory allocation failure with unspecified impact. Upgrading to a fixed release (1.900.11 or later) is the recommende...
CVE-2016-9387
Integer overflow in the jpcdecprocesssiz function in libjasper/jpc/jpcdec.c in JasPer before 1.900.13 allows remote attackers to have unspecified impact via a crafted file, which triggers an assertion failure...
CVE-2016-9399
The calcstepsizes function in jpcdec.c in JasPer 1.900.22 allows remote attackers to cause a denial of service assertion failure via unspecified vectors...