Design/Logic Flaw

The jasmatrixbindsub function in jasseq.c in JasPer 2.0.10 allows remote attackers to cause a denial of service invalid read via a crafted image...

Integer overflow

Integer overflow in the jpcpinextcprl function in jpct2cod.c in JasPer before 1.900.20 allows remote attackers to have unspecified impact via a crafted file, which triggers use of an uninitialized value...

CVE-2016-10249

Integer overflow in the jpcdectiledecode function in jpcdec.c in JasPer before 1.900.12 allows remote attackers to have unspecified impact via a crafted image file, which triggers a heap-based buffer overflow...

CVE-2016-10251

Integer overflow in the jpcpinextcprl function in jpct2cod.c in JasPer before 1.900.20 allows remote attackers to have unspecified impact via a crafted file, which triggers use of an uninitialized value...

Integer overflow

Integer overflow in the jpcdectiledecode function in jpcdec.c in JasPer before 1.900.12 allows remote attackers to have unspecified impact via a crafted image file, which triggers a heap-based buffer overflow...

CVE-2016-10250

The jp2colrdestroy function in jp2cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service NULL pointer dereference by leveraging incorrect cleanup of JP2 box data on error. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8887...

CVE-2017-6852

Heap-based buffer overflow in the jpcdecdecodepkt function in jpct2dec.c in JasPer 2.0.10 allows remote attackers to have unspecified impact via a crafted image...

UBUNTU-CVE-2017-6852

Heap-based buffer overflow in the jpcdecdecodepkt function in jpct2dec.c in JasPer 2.0.10 allows remote attackers to have unspecified impact via a crafted image...

CVE-2016-10248

The jpctsfbsynthesize function in jpctsfb.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service NULL pointer dereference via vectors involving an empty sequence...

CVE-2016-10250

The jp2colrdestroy function in jp2cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service NULL pointer dereference by leveraging incorrect cleanup of JP2 box data on error. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8887...

CVE-2016-10251

Integer overflow in the jpcpinextcprl function in jpct2cod.c in JasPer before 1.900.20 allows remote attackers to have unspecified impact via a crafted file, which triggers use of an uninitialized value...

Heap overflow

Heap-based buffer overflow in the jpcdecdecodepkt function in jpct2dec.c in JasPer 2.0.10 allows remote attackers to have unspecified impact via a crafted image...

Null pointer dereference

The jpctsfbsynthesize function in jpctsfb.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service NULL pointer dereference via vectors involving an empty sequence...

CVE-2017-6851

The jasmatrixbindsub function in jasseq.c in JasPer 2.0.10 allows remote attackers to cause a denial of service invalid read via a crafted image...

CVE-2016-10248

CVE-2016-10248 affects the JasPer JPEG 2000 library. The bug is in the jpc_tsfb_synthesize function (jpc_tsfb.c) in JasPer prior to 1.900.9 and allows a remote attacker to cause a denial of service via a NULL pointer dereference when handling an empty sequence. The vulnerability is reported with ...

CVE-2016-10251

CVE-2016-10251 : JasPer 1.900.x before 1.900.20 contains an integer overflow in jpc_pi_nextcprl (jpc_t2cod.c). Crafting a JPEG 2000 file can trigger use of an uninitialized value, with unspecified impact. Affected software versions: JasPer up to but not including 1.900.20. Remediation: upgrade to...

CVE-2017-6852

CVE-2017-6852 affects JasPer 2.0.10: a heap-based buffer overflow in the jpc_dec_decodepkt function (jpc_t2dec.c) can be triggered by a crafted JPEG 2000 image, potentially enabling remote impact. The provided documents explicitly describe the vulnerability as a heap-based overflow with unspecifi...

CVE-2017-6850

CVE-2017-6850 affects JasPer/Jasper-based code path jp2_cdef_destroy in jp2_cod.c, with a NULL pointer dereference leading to denial of service when processing a crafted image. Public advisories (EulerOS, OpenVAS/NASL references) confirm the vulnerability remains tied to JasPer versions before 2....

CVE-2016-10250

The vulnerability CVE-2016-10250 affects JasPer’s JP2 box handling. Specifically, the jp2_colr_destroy function in jp2_cod.c (JasPer) before 1.900.13 allows a remote attacker to cause a denial of service via a NULL pointer dereference due to incomplete cleanup of JP2 box data on error (note: tied...

CVE-2016-10249

CVE-2016-10249 affects JasPer (JPEG 2000 library). The vulnerable component is the jpc_dec_tiledecode function in jpc_dec.c, where an integer overflow can occur during decoding of a crafted image, triggering a heap-based buffer overflow. This can lead to a crash or potential arbitrary code execut...