CVE-2016-8886

The jasmalloc function in libjasper/base/jasmalloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted file, which triggers a memory allocation failure...

CVE-2016-9387

Integer overflow in the jpcdecprocesssiz function in libjasper/jpc/jpcdec.c in JasPer before 1.900.13 allows remote attackers to have unspecified impact via a crafted file, which triggers an assertion failure...

CVE-2016-9387

Integer overflow in the jpcdecprocesssiz function in libjasper/jpc/jpcdec.c in JasPer before 1.900.13 allows remote attackers to have unspecified impact via a crafted file, which triggers an assertion failure...

CVE-2016-9387

CVE-2016-9387: Integer overflow in JasPer’s jpc_dec_process_siz function (libjasper/jpc/jpc_dec.c) allows crafted JPEG-2000 files to trigger an assertion failure, as reported for JasPer prior to 1.900.13. The available connected documents confirm the vulnerability in the JasPer library and refere...

CVE-2016-8887

The jp2colrdestroy function in libjasper/jp2/jp2cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service NULL pointer dereference...

CVE-2016-9398

The jpcfloorlog2 function in jpcmath.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service assertion failure via unspecified vectors...

CVE-2016-9262

Multiple integer overflows in the 1 jasrealloc function in base/jasmalloc.c and 2 memresize function in base/jasstream.c in JasPer before 1.900.22 allow remote attackers to cause a denial of service via a crafted image, which triggers use after free vulnerabilities...

CVE-2016-9262

Multiple integer overflows in the 1 jasrealloc function in base/jasmalloc.c and 2 memresize function in base/jasstream.c in JasPer before 1.900.22 allow remote attackers to cause a denial of service via a crafted image, which triggers use after free vulnerabilities...

CVE-2016-9397

CVE-2016-9397 is related to JasPer. The description specifies that the vulnerability exists in the jpc_dequantize function of jpc_dec.c in JasPer 1.900.13, where an attacker can trigger a denial of service (assertion failure) via unspecified vectors. The Connected documents (Nessus/OpenVAS entrie...

CVE-2016-9262

JasPer contains a vulnerability CVE-2016-9262: two integer overflows in jas_realloc (base/jas_malloc.c) and mem_resize (base/jas_stream.c) in versions prior to 1.900.22, allowing remote attackers to trigger a denial of service via a crafted image that also leads to use-after-free conditions. The ...

CVE-2016-9395: Improper Input Validation

The jasseq2dcreate function in jasseq.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service assertion failure via a crafted file...

CVE-2016-9399: Reachable Assertion

The calcstepsizes function in jpcdec.c in JasPer 1.900.22 allows remote attackers to cause a denial of service assertion failure via unspecified vectors...

CVE-2016-9398: Reachable Assertion

The jpcfloorlog2 function in jpcmath.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service assertion failure via unspecified vectors...

CVE-2016-9397: Reachable Assertion

The jpcdequantize function in jpcdec.c in JasPer 1.900.13 allows remote attackers to cause a denial of service assertion failure via unspecified vectors...

PT-2017-10113

Name of the Vulnerable Software and Affected Versions JasPer version 1.900.13 Description The issue allows remote attackers to cause a denial of service, specifically an assertion failure, via unspecified vectors. This is related to the jpc dequantize function in jpc dec.c. Recommendations For...

PT-2017-10115

Name of the Vulnerable Software and Affected Versions JasPer version 1.900.22 Description The issue allows remote attackers to cause a denial of service, specifically an assertion failure, via unspecified vectors. This is related to the calcstepsizes function in jpc dec.c. The estimated number of...

UBUNTU-CVE-2016-9392

The calcstepsizes function in jpcdec.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service assertion failure via a crafted file...

UBUNTU-CVE-2016-9387

Integer overflow in the jpcdecprocesssiz function in libjasper/jpc/jpcdec.c in JasPer before 1.900.13 allows remote attackers to have unspecified impact via a crafted file, which triggers an assertion failure...

CVE-2016-8887: NULL Pointer Dereference

The jp2colrdestroy function in libjasper/jp2/jp2cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service NULL pointer dereference...

CVE-2016-8886: Improper Restriction of Operations within the Bounds of a Memory Buffer

The jasmalloc function in libjasper/base/jasmalloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted file, which triggers a memory allocation failure...