PT-2021-20527

Name of the Vulnerable Software and Affected Versions: Jasper versions prior to 2.0.27 Description: A NULL pointer dereference flaw was found in the way Jasper handled component references in the JP2 image format decoder. A specially crafted JP2 image file could cause an application using the...

PT-2021-20637

Name of the Vulnerable Software and Affected Versions: Jasper versions prior to 2.0.26 Description: A NULL pointer dereference flaw was found in the way Jasper handled component references in CDEF box in the JP2 image format decoder. A specially crafted JP2 image file could cause an application...

CVE-2019-16138

An issue was discovered in the image crate before 0.21.3 for Rust, affecting the HDR image format decoder. Vec::setlen is called on an uninitialized vector, leading to a use-after-free and arbitrary code execution...

CVE-2019-16138: Use After Free

An issue was discovered in the image crate before 0.21.3 for Rust, affecting the HDR image format decoder. Vec::setlen is called on an uninitialized vector, leading to a use-after-free and arbitrary code execution...

PT-2019-14534

Name of the Vulnerable Software and Affected Versions image crate versions prior to 0.21.3 image crate versions prior to 0.22 Description An issue was discovered in the HDR image format decoder, where Vec::set len is called on an uninitialized vector. This leads to a use-after-free and allows for...