831 matches found
Memory corruption
JasPer 2.0.14 has a memory leak in base/jasmalloc.c in libjasper.a when "--output-format jp2" is used...
CVE-2018-20622
JasPer 2.0.14 has a memory leak in base/jasmalloc.c in libjasper.a when "--output-format jp2" is used...
CVE-2018-20622
JasPer 2.0.14 has a memory leak in base/jasmalloc.c in libjasper.a when "--output-format jp2" is used...
PT-2018-3487 · Jasper +2 · Jasper +2
Name of the Vulnerable Software and Affected Versions: JasPer version 2.0.14 Description: The issue is related to a memory leak in the base/jas malloc.c file of the libjasper.a library. This memory leak occurs when the "--output-format jp2" option is used. The exploitation of this issue may allow...
CVE-2018-20584
JasPer 2.0.14 allows remote attackers to cause a denial of service application hang via an attempted conversion to the jp2 format...
CVE-2018-20584
JasPer 2.0.14 allows remote attackers to cause a denial of service application hang via an attempted conversion to the jp2 format...
Format string
JasPer 2.0.14 allows remote attackers to cause a denial of service application hang via an attempted conversion to the jp2 format...
CVE-2018-20584
JasPer 2.0.14 allows remote attackers to cause a denial of service application hang via an attempted conversion to the jp2 format...
[SECURITY] Fedora 28 Update: openjpeg2-2.3.0-10.fc28
The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profil e-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multi ple...
[SECURITY] Fedora 29 Update: openjpeg2-2.3.0-10.fc29
The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profil e-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multi ple...
Exiv2 Buffer Overflow Vulnerability (CNVD-2019-07088)
Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. A heap buffer overflow vulnerability exists in Exiv2::Jp2Image::encodeJp2Header in jp2image.cpp in Exiv2 0.27-RC3, which can be exploited by a remote attacker via specially crafted input to cause a denial ...
PYSEC-2018-119
There is a heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...
PT-2018-15257 · Exiv2 +5 · Exiv2 +5
Name of the Vulnerable Software and Affected Versions: Exiv2 version 0.27-RC3 Description: A heap-based buffer over-read issue exists in the encodeJp2Header function of jp2image.cpp. This can be triggered by a crafted input, potentially leading to a remote denial of service attack. Recommendation...
CVE-2018-19542
An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function jp2decode in libjasper/jp2/jp2dec.c, leading to a denial of service...
UBUNTU-CVE-2018-19542
An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function jp2decode in libjasper/jp2/jp2dec.c, leading to a denial of service...
CVE-2018-19543
An issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the function jp2decode in libjasper/jp2/jp2dec.c...
jasper: NULL pointer exception in jp2_encode()
JasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2encode which failed to check to see if the image contained at least one component resulting in a denial-of-service...
[SECURITY] Fedora 28 Update: openjpeg2-2.3.0-9.fc28
The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profil e-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multi ple...