CVE-2016-9394

CVE-2016-9394 affects JasPer JPEG-2000 library. The jas_seq2d_create function in jas_seq.c is vulnerable to assertion-failure denial of service when processing crafted image files, for JasPer versions before 1.900.17. The connected documents corroborate that historical JasPer vulnerabilities incl...

CVE-2016-9392

CVE-2016-9392 affects the JasPer JPEG 2000 library. The calcstepsizes function in jpc_dec.c in JasPer before 1.900.17 allows a crafted file to trigger an assertion failure, causing a denial of service. Affected are JasPer versions earlier than 1.900.17; remediation is to upgrade to 1.900.17 or ne...

CVE-2016-9399

CVE-2016-9399 affects JasPer, with the description noting a vulnerability in the calcstepsizes function of jpc_dec.c in JasPer 1.900.22 that allows remote denial of service via assertion failure. Connected documents (Red Hat advisories and OpenVAS entries) list CVE-2016-9399 among Jasper-related ...

CVE-2016-9398

The jpcfloorlog2 function in jpcmath.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service assertion failure via unspecified vectors...

CVE-2016-9397

CVE-2016-9397 is related to JasPer. The description specifies that the vulnerability exists in the jpc_dequantize function of jpc_dec.c in JasPer 1.900.13, where an attacker can trigger a denial of service (assertion failure) via unspecified vectors. The Connected documents (Nessus/OpenVAS entrie...

CVE-2016-8886

CVE-2016-8886 affects the JasPer library (libjasper), specifically the jas_malloc function in base/jas_malloc.c. Before version 1.900.11, processing a crafted file could trigger a memory allocation failure with unspecified impact. Upgrading to a fixed release (1.900.11 or later) is the recommende...

CVE-2016-9392

The calcstepsizes function in jpcdec.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service assertion failure via a crafted file...

CVE-2016-9395

CVE-2016-9395 affects the JasPer library (JasPer) and is triggered by the jas_seq2d_create function in jas_seq.c. The vulnerability exists in JasPer before 1.900.25 and allows remote attackers to cause a denial of service via an crafted image, by triggering an assertion failure in the library. Mu...

CVE-2016-8885

The bmpgetdata function in libjasper/bmp/bmpdec.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service NULL pointer dereference by calling the imginfo command with a crafted BMP image...

CVE-2016-8885

CVE-2016-8885 affects the JasPer JPEG-2000 library. The NULL pointer dereference in bmp_getdata (libjasper/bmp/bmp_dec.c) can be triggered by a crafted BMP image via the imginfo command, leading to a denial of service. The description in the initial and linked advisories indicates this family of ...

CVE-2016-9397

The jpcdequantize function in jpcdec.c in JasPer 1.900.13 allows remote attackers to cause a denial of service assertion failure via unspecified vectors...

CVE-2016-9388

The rasgetcmap function in rasdec.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service assertion failure via a crafted image file...

CVE-2016-9557

This CVE refers to an integer overflow in JasPer’s jas_image.c (JasPer) prior to version 1.900.25, allowing remote attackers to cause a denial of service (application crash) via a crafted file. The connected documents confirm this issue in the JasPer package and indicate fixes/patches were releas...

CVE-2016-9557

Integer overflow in jasimage.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service application crash via a crafted file...

CVE-2016-9387

Integer overflow in the jpcdecprocesssiz function in libjasper/jpc/jpcdec.c in JasPer before 1.900.13 allows remote attackers to have unspecified impact via a crafted file, which triggers an assertion failure...

CVE-2016-9396

The JPCNOMINALGAIN function in jpc/jpct1cod.c in JasPer through 2.0.12 allows remote attackers to cause a denial of service JPCCOXRFT assertion failure via unspecified vectors...

CVE-2016-9396

CVE-2016-9396 and CVE-2017-1000050 affect JasPer, with confirmed issues in JPC_NOMINALGAIN() and jp2_encode() that can lead to denial of service. Public disclosures and updates reference JasPer vulnerabilities across multiple vendors/advisories (e.g., USN-3693-1, RHSA-2018:3253, CentOS advisory, ...

CVE-2016-9390

The jasseq2dcreate function in jasseq.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service assertion failure via a crafted image file...

CVE-2016-9391

The jpcbitstreamgetbits function in jpcbs.c in JasPer before 2.0.10 allows remote attackers to cause a denial of service assertion failure via a very large integer...

CVE-2016-9390

CVE-2016-9390 – JasPer JPEG 2000 library : The vulnerability is in jas_seq2d_create in JasPer before 1.900.14, where a crafted image file can trigger an assertion failure and cause a denial of service. Affected component is the JasPer library’s JPEG 2000 handling; root cause is an assertion failu...