CVE-2017-13753

JasPer (JPEG-2000 codec) is affected by two documented CVEs: CVE-2016-9396 (reachable assertion in JPC_NOMINALGAIN) and CVE-2017-1000050 (NULL pointer exception in jp2_encode). Multiple vendor advisories confirm affected products and fixes, e.g., Red Hat/CentOS (CESA RHSA-2018:3253) and IBM Power...