CVE-2018-19542

CVE-2018-19542 affects JasPer 2.0.14. The vulnerability is a NULL pointer dereference in jp2_decode (libjasper/jp2/jp2_dec.c) that leads to a denial of service. The connected documents confirm the issue and cite unpatched status on several Red Hat releases (RHEL 6/7/8) via Nessus entries, but do ...

JasPer Null Pointer Dereference Vulnerability (CNVD-2019-00809)

JasPer is a Canadian software developer Michael Adams developed a JPEG-2000 codec / decoder open source implementation . A null pointer dereference vulnerability exists in the 'jp2decode' function in the libjasper/jp2/jp2dec.c file in version 2.0.14 of JasPer, which can be exploited by an attacke...

Denial Of Service (DoS)

libjasper.so is vulnerable to denial of service DoS attacks. The vulnerability exists due to a heap-based buffer overflow caused by the jp2decode function in libjasper/jpc/jp2decode.c...

JasPer jp2_decode Out of Bounds Read (CVE-2017-9782)

An out-of-bounds array indexing vulnerability has been reported in JasPer. The vulnerability is due to improper handling of objects in memory within the jp2decode function of jp2dec.c. A remote attacker could exploit this vulnerability by supplying a crafted image file to an application using the...

CVE-2017-9782

JasPer 2.0.12 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted image, related to the jp2decode function in libjasper/jp2/jp2dec.c...

Heap overflow

JasPer 2.0.12 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted image, related to the jp2decode function in libjasper/jp2/jp2dec.c...

CVE-2017-9782

JasPer 2.0.12 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted image, related to the jp2decode function in libjasper/jp2/jp2dec.c...

CVE-2017-9782

JasPer 2.0.12 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted image, related to the jp2decode function in libjasper/jp2/jp2dec.c...

CVE-2017-9782

JasPer 2.0.12 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted image, related to the jp2decode function in libjasper/jp2/jp2dec.c...

CVE-2017-9782

JasPer 2.0.12 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted image, related to the jp2decode function in libjasper/jp2/jp2dec.c...

UBUNTU-CVE-2014-8138

Heap-based buffer overflow in the jp2decode function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted JPEG 2000 file...

[oCERT-2014-012] JasPer input sanitization errors

2014-012 JasPer input sanitization errors Description: The JasPer project is an open source implementation for the JPEG-2000 codec. The library is affected by a double-free vulnerability in function jasiccattrvaldestroy as well as a heap-based buffer overflow in function jp2decode. A specially...

jasper security update

1.900.1-16.2 - CVE-2014-8137 - double-free in in jasiccattrvaldestroy 1173566 - CVE-2014-8138 - heap overflow in jp2decode 1173566 1.900.1-16.1 - CVE-2014-9029 - incorrect component number check in COC, RGN and QCC marker segment decoders 1171208 1.900.1-16 - CERT VU887409: heap buffer overflow...