UBUNTU-CVE-2017-6852

Heap-based buffer overflow in the jpcdecdecodepkt function in jpct2dec.c in JasPer 2.0.10 allows remote attackers to have unspecified impact via a crafted image...

CVE-2017-6852

Heap-based buffer overflow in the jpcdecdecodepkt function in jpct2dec.c in JasPer 2.0.10 allows remote attackers to have unspecified impact via a crafted image...

Integer overflow

Integer overflow in the jpcdectiledecode function in jpcdec.c in JasPer before 1.900.12 allows remote attackers to have unspecified impact via a crafted image file, which triggers a heap-based buffer overflow...

CVE-2016-10250

The jp2colrdestroy function in jp2cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service NULL pointer dereference by leveraging incorrect cleanup of JP2 box data on error. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8887...

CVE-2016-10250

The jp2colrdestroy function in jp2cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service NULL pointer dereference by leveraging incorrect cleanup of JP2 box data on error. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8887...

CVE-2016-10248

The jpctsfbsynthesize function in jpctsfb.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service NULL pointer dereference via vectors involving an empty sequence...

CVE-2017-6851

The jasmatrixbindsub function in jasseq.c in JasPer 2.0.10 allows remote attackers to cause a denial of service invalid read via a crafted image...

Null pointer dereference

The jpctsfbsynthesize function in jpctsfb.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service NULL pointer dereference via vectors involving an empty sequence...

Heap overflow

Heap-based buffer overflow in the jpcdecdecodepkt function in jpct2dec.c in JasPer 2.0.10 allows remote attackers to have unspecified impact via a crafted image...

CVE-2016-10251

Integer overflow in the jpcpinextcprl function in jpct2cod.c in JasPer before 1.900.20 allows remote attackers to have unspecified impact via a crafted file, which triggers use of an uninitialized value...

CVE-2016-10248

CVE-2016-10248 affects the JasPer JPEG 2000 library. The bug is in the jpc_tsfb_synthesize function (jpc_tsfb.c) in JasPer prior to 1.900.9 and allows a remote attacker to cause a denial of service via a NULL pointer dereference when handling an empty sequence. The vulnerability is reported with ...

CVE-2016-10251

CVE-2016-10251 : JasPer 1.900.x before 1.900.20 contains an integer overflow in jpc_pi_nextcprl (jpc_t2cod.c). Crafting a JPEG 2000 file can trigger use of an uninitialized value, with unspecified impact. Affected software versions: JasPer up to but not including 1.900.20. Remediation: upgrade to...

CVE-2017-6852

CVE-2017-6852 affects JasPer 2.0.10: a heap-based buffer overflow in the jpc_dec_decodepkt function (jpc_t2dec.c) can be triggered by a crafted JPEG 2000 image, potentially enabling remote impact. The provided documents explicitly describe the vulnerability as a heap-based overflow with unspecifi...

CVE-2017-6850

CVE-2017-6850 affects JasPer/Jasper-based code path jp2_cdef_destroy in jp2_cod.c, with a NULL pointer dereference leading to denial of service when processing a crafted image. Public advisories (EulerOS, OpenVAS/NASL references) confirm the vulnerability remains tied to JasPer versions before 2....

CVE-2017-6850

The jp2cdefdestroy function in jp2cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted image...

CVE-2017-6851

The jasmatrixbindsub function in jasseq.c in JasPer 2.0.10 allows remote attackers to cause a denial of service invalid read via a crafted image...

CVE-2016-10249

Integer overflow in the jpcdectiledecode function in jpcdec.c in JasPer before 1.900.12 allows remote attackers to have unspecified impact via a crafted image file, which triggers a heap-based buffer overflow...

CVE-2016-10249

CVE-2016-10249 affects JasPer (JPEG 2000 library). The vulnerable component is the jpc_dec_tiledecode function in jpc_dec.c, where an integer overflow can occur during decoding of a crafted image, triggering a heap-based buffer overflow. This can lead to a crash or potential arbitrary code execut...

CVE-2016-10250

The vulnerability CVE-2016-10250 affects JasPer’s JP2 box handling. Specifically, the jp2_colr_destroy function in jp2_cod.c (JasPer) before 1.900.13 allows a remote attacker to cause a denial of service via a NULL pointer dereference due to incomplete cleanup of JP2 box data on error (note: tied...

CVE-2017-6851

JasPer 2.0.10 is affected by CVE-2017-6851 via jas_matrix_bindsub in jas_seq.c, allowing a crafted image to trigger a denial of service (invalid read). The connected advisories (MGASA-2020-0337 and OSV-Managed pages) enumerate multiple Jasper CVEs and indicate fixes in updated Jasper packages; re...