JasPer integer overflow vulnerability (CNVD-2017-03801)

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. An integer overflow vulnerability exists in the jpcdectiledecode function in the jpcdec.c file in versions of JasPer prior to 1.900.12. A remote attacker could exploit this...

PT-2017-7828

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.12 Description The issue is related to an integer overflow in the jpc dec tiledecode function, which can be triggered by a crafted image file. This overflow can lead to a heap-based buffer overflow, potentially...

PT-2017-9854

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.8 Description The issue allows remote attackers to cause a denial of service via a crafted file. This is due to a problem in the jpc dec tiledecode function in jpc dec.c. Recommendations For versions prior to...