CVE-2016-1577

Double free vulnerability in the jasiccattrvaldestroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file, a different vulnerability than CVE-2014-8137...

Memory corruption

Memory leak in the jasiccprofcreatefrombuf function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service memory consumption via a crafted ICC color profile in a JPEG 2000 image file...

Double free

Double free vulnerability in the jasiccattrvaldestroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file, a different vulnerability than CVE-2014-8137...

CVE-2016-2116

Memory leak in the jasiccprofcreatefrombuf function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service memory consumption via a crafted ICC color profile in a JPEG 2000 image file...

CVE-2016-1577

Summary: CVE-2016-1577 is a double‑free vulnerability in JasPer’s jas_iccattrval_destroy function, affecting JasPer 1.900.1 and earlier. A crafted ICC color profile within a JPEG 2000 image can cause a crash or, potentially, arbitrary code execution. Impact (per sources): denial of service with c...

CVE-2016-2116

CVE-2016-2116 corresponds to a memory leak in JasPer’s jas_iccprof_createfrombuf function, present in JasPer 1.900.1 and earlier. The vulnerability allows a remote attacker to trigger denial of service via memory exhaustion by feeding a crafted ICC color profile in a JPEG 2000 image. Public refer...

CVE-2016-1577

Double free vulnerability in the jasiccattrvaldestroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file, a different vulnerability than CVE-2014-8137...

OpenJPEG 'opj_pi_next_cprl' Function Denial of Service Vulnerability

OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability in OpenJPEG's opjpinextcprl function line 523 of the pi.c file allows remote attackers to exploit the vulnerability to construct specially crafted JPEG 2000 images for denial of service attacks...

OpenJPEG 'opj_tcd_init_tile' Function Denial of Service Vulnerability

OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability in the opjtcdinittile function of OpenJPEG allows remote attackers to construct specially crafted JPEG 2000 images for denial of service attacks...

OpenJPEG 'opj_pi_next_cprl' function denial of service vulnerability (CNVD-2016-05612)

OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability in OpenJPEG's opjpinextcprl function line 526 of the pi.c file allows remote attackers to exploit the vulnerability to construct specially crafted JPEG 2000 images for denial of service attacks...

USN-2919-1 JasPer vulnerabilities | Cloud Foundry

USN-2919-1 JasPer vulnerabilities Medium Vendor Ubuntu, JasPer Versions Affected Ubuntu 14.04 LTS Description Jacob Baines discovered that JasPer incorrectly handled ICC color profiles in JPEG-2000 image files. If a user were tricked into opening a specially crafted JPEG-2000 image file, a remote...

OpenJPEG Denial of Service Vulnerability (CNVD-2016-01726)

OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability exists in the 'opjtcdfreetile' function of OpenJPEG. The vulnerability can be exploited by an attacker to cause a denial of service out-of-bounds read with a specially crafted JPEG 2000 image...

OpenJPEG Denial of Service Vulnerability (CNVD-2016-01725)

OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability exists in the 'opjfree' function of OpenJPEG. An attacker can exploit this vulnerability to cause a denial of service double release or heap corruption with a specially crafted JPEG 2000 image...

OpenJPEG Denial of Service Vulnerability (CNVD-2016-01724)

OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability exists in the 'sycc422torgb' function of OpenJPEG. An attacker can exploit this vulnerability to cause a denial of service read across boundaries with a specially crafted JPEG 2000 image...

CVE-2016-1645

Multiple integer signedness errors in the opjj2kupdateimagedata function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 49.0.2623.87, allow remote attackers to cause a denial of service incorrect cast and out-of-bounds write or possibly have unspecified other impact via crafted...

Integer overflow

Multiple integer signedness errors in the opjj2kupdateimagedata function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 49.0.2623.87, allow remote attackers to cause a denial of service incorrect cast and out-of-bounds write or possibly have unspecified other impact via crafted...

CVE-2016-1645

Multiple integer signedness errors in the opjj2kupdateimagedata function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 49.0.2623.87, allow remote attackers to cause a denial of service incorrect cast and out-of-bounds write or possibly have unspecified other impact via crafted...

CVE-2016-1645

Multiple integer signedness errors in the opjj2kupdateimagedata function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 49.0.2623.87, allow remote attackers to cause a denial of service incorrect cast and out-of-bounds write or possibly have unspecified other impact via crafted...

CVE-2016-1645

CVE-2016-1645 is an out-of-bounds write issue in the pdfium library derived from OpenJPEG’s opj_j2k_update_image_data, used by Google Chrome’s PDF rendering path. Multiple connected advisories confirm the vulnerability in Chrome before 49.0.2623.87 and link it to a vulnerability class described a...

The vulnerability of the FFmpeg multimedia library, which allows a hacker to trigger a service failure

The vulnerability of the jpeg2000decodetile function libavcodec/jpeg2000dec.c in the FFmpeg multimedia library is due to buffer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure buffer overflow by using specially crafted JPEG 2000 format data...