2381 matches found
CVE-2016-9392
The calcstepsizes function in jpcdec.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service assertion failure via a crafted file...
CVE-2016-9394
The jasseq2dcreate function in jasseq.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service assertion failure via a crafted file...
CVE-2016-9389
The jpcirct and jpciict functions in jpcmct.c in JasPer before 1.900.14 allow remote attackers to cause a denial of service assertion failure...
CVE-2016-9262
Multiple integer overflows in the 1 jasrealloc function in base/jasmalloc.c and 2 memresize function in base/jasstream.c in JasPer before 1.900.22 allow remote attackers to cause a denial of service via a crafted image, which triggers use after free vulnerabilities...
UBUNTU-CVE-2016-9398
The jpcfloorlog2 function in jpcmath.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service assertion failure via unspecified vectors...
CVE-2016-8886
CVE-2016-8886 affects the JasPer library (libjasper), specifically the jas_malloc function in base/jas_malloc.c. Before version 1.900.11, processing a crafted file could trigger a memory allocation failure with unspecified impact. Upgrading to a fixed release (1.900.11 or later) is the recommende...
CVE-2016-9398
The jpcfloorlog2 function in jpcmath.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service assertion failure via unspecified vectors...
CVE-2016-9399
The calcstepsizes function in jpcdec.c in JasPer 1.900.22 allows remote attackers to cause a denial of service assertion failure via unspecified vectors...
CVE-2016-9390
The jasseq2dcreate function in jasseq.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service assertion failure via a crafted image file...
CVE-2016-9397
CVE-2016-9397 is related to JasPer. The description specifies that the vulnerability exists in the jpc_dequantize function of jpc_dec.c in JasPer 1.900.13, where an attacker can trigger a denial of service (assertion failure) via unspecified vectors. The Connected documents (Nessus/OpenVAS entrie...
CVE-2016-8886
The jasmalloc function in libjasper/base/jasmalloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted file, which triggers a memory allocation failure...
CVE-2016-8887
The jp2colrdestroy function in libjasper/jp2/jp2cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service NULL pointer dereference...
CVE-2016-8887
CVE-2016-8887 affects the JasPer JPEG-2000 library. The vulnerability is in the jp2_colr_destroy function (libjasper/jp2/jp2_cod.c) and can cause a denial of service via a NULL pointer dereference. It applies to JasPer versions before 1.900.10 (with later advisories noting incomplete fixes in sub...
CVE-2016-9397
The jpcdequantize function in jpcdec.c in JasPer 1.900.13 allows remote attackers to cause a denial of service assertion failure via unspecified vectors...
CVE-2016-9397
The jpcdequantize function in jpcdec.c in JasPer 1.900.13 allows remote attackers to cause a denial of service assertion failure via unspecified vectors...
CVE-2016-9557
Integer overflow in jasimage.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service application crash via a crafted file...
CVE-2016-9392
The calcstepsizes function in jpcdec.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service assertion failure via a crafted file...
CVE-2016-9396
The JPCNOMINALGAIN function in jpc/jpct1cod.c in JasPer through 2.0.12 allows remote attackers to cause a denial of service JPCCOXRFT assertion failure via unspecified vectors...
CVE-2016-9394
CVE-2016-9394 affects JasPer JPEG-2000 library. The jas_seq2d_create function in jas_seq.c is vulnerable to assertion-failure denial of service when processing crafted image files, for JasPer versions before 1.900.17. The connected documents corroborate that historical JasPer vulnerabilities incl...
CVE-2016-9557
This CVE refers to an integer overflow in JasPer’s jas_image.c (JasPer) prior to version 1.900.25, allowing remote attackers to cause a denial of service (application crash) via a crafted file. The connected documents confirm this issue in the JasPer package and indicate fixes/patches were releas...