Use-After-Free (UAF)

libjasper.so is affected by a use-after-free UAF vulnerability. This is due to the way tvp and tvp-buf are freed in the mifprocesscmpt function in libjasper/mif/mifcod.c which would allow remote attackers to cause a denial of service using a crafted JPEG 2000 image file...

CVE-2015-5221

Use-after-free vulnerability in the mifprocesscmpt function in libjasper/mif/mifcod.c in the JasPer JPEG-2000 library before 1.900.2 allows remote attackers to cause a denial of service crash via a crafted JPEG 2000 image file...