JasPer Denial of Service Vulnerability (CNVD-2017-25687)

JasPer is an open source project that aims to provide a free software-based reference implementation of the codecs specified in the JPEG-2000 Part-1 standard. A denial of service vulnerability exists in the calcstepsizes function in jpc/jpcdec.c in JasPer, which can be exploited by a remote...