2381 matches found
CVE-2016-9398
CVE-2016-9398 affects JasPer: the jpc_floorlog2 function in jpc_math.c is vulnerable in versions before 1.900.17, allowing remote attackers to trigger a denial of service (assertion failure) via unspecified vectors. Connected documents confirm the affected component and impact; no remediation det...
CVE-2016-8886
The jasmalloc function in libjasper/base/jasmalloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted file, which triggers a memory allocation failure...
CVE-2016-9387
Integer overflow in the jpcdecprocesssiz function in libjasper/jpc/jpcdec.c in JasPer before 1.900.13 allows remote attackers to have unspecified impact via a crafted file, which triggers an assertion failure...
CVE-2016-9387
CVE-2016-9387: Integer overflow in JasPer’s jpc_dec_process_siz function (libjasper/jpc/jpc_dec.c) allows crafted JPEG-2000 files to trigger an assertion failure, as reported for JasPer prior to 1.900.13. The available connected documents confirm the vulnerability in the JasPer library and refere...
CVE-2016-8887
The jp2colrdestroy function in libjasper/jp2/jp2cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service NULL pointer dereference...
CVE-2016-9398
The jpcfloorlog2 function in jpcmath.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service assertion failure via unspecified vectors...
CVE-2016-9387
Integer overflow in the jpcdecprocesssiz function in libjasper/jpc/jpcdec.c in JasPer before 1.900.13 allows remote attackers to have unspecified impact via a crafted file, which triggers an assertion failure...
CVE-2016-8885
The bmpgetdata function in libjasper/bmp/bmpdec.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service NULL pointer dereference by calling the imginfo command with a crafted BMP image...
CVE-2016-8885
The bmpgetdata function in libjasper/bmp/bmpdec.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service NULL pointer dereference by calling the imginfo command with a crafted BMP image...
CVE-2016-9262
JasPer contains a vulnerability CVE-2016-9262: two integer overflows in jas_realloc (base/jas_malloc.c) and mem_resize (base/jas_stream.c) in versions prior to 1.900.22, allowing remote attackers to trigger a denial of service via a crafted image that also leads to use-after-free conditions. The ...
CVE-2016-9262
Multiple integer overflows in the 1 jasrealloc function in base/jasmalloc.c and 2 memresize function in base/jasstream.c in JasPer before 1.900.22 allow remote attackers to cause a denial of service via a crafted image, which triggers use after free vulnerabilities...
CVE-2016-9262
Multiple integer overflows in the 1 jasrealloc function in base/jasmalloc.c and 2 memresize function in base/jasstream.c in JasPer before 1.900.22 allow remote attackers to cause a denial of service via a crafted image, which triggers use after free vulnerabilities...
CVE-2016-9391
JasPer (CVE-2016-9391): The jpc_bitstream_getbits function in jpc_bs.c of JasPer before 2.0.10 allows remote attackers to cause a denial of service (assertion failure) via a very large integer. This is the asserted under the CVE-2016-9391 entry and is corroborated by connected Nessus/NVD referenc...
CVE-2016-9391
The jpcbitstreamgetbits function in jpcbs.c in JasPer before 2.0.10 allows remote attackers to cause a denial of service assertion failure via a very large integer...
CVE-2016-9391
The jpcbitstreamgetbits function in jpcbs.c in JasPer before 2.0.10 allows remote attackers to cause a denial of service assertion failure via a very large integer...
CVE-2016-9388
CVE-2016-9388 : The ras_getcmap function in ras_dec.c of the Jasper JPEG 2000 library (before 1.900.14) enables a remote attacker to trigger a denial of service via a crafted image file that causes an assertion failure. The connected documents confirm this vulnerability within JasPer and referenc...
CVE-2016-8885
CVE-2016-8885 affects the JasPer JPEG-2000 library. The NULL pointer dereference in bmp_getdata (libjasper/bmp/bmp_dec.c) can be triggered by a crafted BMP image via the imginfo command, leading to a denial of service. The description in the initial and linked advisories indicates this family of ...
CVE-2016-9395: Improper Input Validation
The jasseq2dcreate function in jasseq.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service assertion failure via a crafted file...
