Lucene search

K
Jasper ProjectJasper

99 matches found

CVE
CVE
added 2016/04/13 2:59 p.m.85 views

CVE-2016-2116

Memory leak in the jas_iccprof_createfrombuf function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted ICC color profile in a JPEG 2000 image file.

5.7CVSS5.8AI score0.0945EPSS
CVE
CVE
added 2016/01/20 4:59 p.m.84 views

CVE-2016-1867

The jpc_pi_nextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG 2000 image.

6.5CVSS6.3AI score0.00462EPSS
CVE
CVE
added 2021/03/25 7:15 p.m.84 views

CVE-2021-3443

A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.27 handled component references in the JP2 image format decoder. A specially crafted JP2 image file could cause an application using the Jasper library to crash when opened.

5.5CVSS5.3AI score0.00036EPSS
CVE
CVE
added 2017/03/23 6:59 p.m.82 views

CVE-2016-9393

The jpc_pi_nextrpcl function in jpc_t2cod.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.

5.5CVSS5.8AI score0.00475EPSS
CVE
CVE
added 2016/04/13 2:59 p.m.81 views

CVE-2016-1577

Double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file, a different vulnerability than CVE-2014-8137.

7.6CVSS6.9AI score0.31457EPSS
CVE
CVE
added 2017/03/23 6:59 p.m.81 views

CVE-2016-9388

The ras_getcmap function in ras_dec.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file.

5.5CVSS5.8AI score0.00263EPSS
CVE
CVE
added 2022/10/14 6:15 p.m.81 views

CVE-2022-2963

A vulnerability found in jasper. This security vulnerability happens because of a memory leak bug in function cmdopts_parse that can cause a crash or segmentation fault.

7.5CVSS7.3AI score0.00091EPSS
CVE
CVE
added 2017/03/15 2:59 p.m.80 views

CVE-2016-10248

The jpc_tsfb_synthesize function in jpc_tsfb.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer dereference) via vectors involving an empty sequence.

7.5CVSS7AI score0.0066EPSS
CVE
CVE
added 2017/01/13 4:59 p.m.79 views

CVE-2016-8883

The jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.

5.5CVSS5.8AI score0.00379EPSS
CVE
CVE
added 2017/03/23 6:59 p.m.78 views

CVE-2016-9394

The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.

5.5CVSS5.8AI score0.00461EPSS
CVE
CVE
added 2018/03/12 3:29 p.m.78 views

CVE-2016-9600

JasPer before version 2.0.10 is vulnerable to a null pointer dereference was found in the decoded creation of JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash.

6.5CVSS6.5AI score0.00295EPSS
CVE
CVE
added 2021/03/25 7:15 p.m.77 views

CVE-2021-3467

A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.26 handled component references in CDEF box in the JP2 image format decoder. A specially crafted JP2 image file could cause an application using the Jasper library to crash when opened.

5.5CVSS5.6AI score0.00073EPSS
CVE
CVE
added 2017/03/23 6:59 p.m.76 views

CVE-2016-9389

The jpc_irct and jpc_iict functions in jpc_mct.c in JasPer before 1.900.14 allow remote attackers to cause a denial of service (assertion failure).

7.5CVSS7.2AI score0.01628EPSS
CVE
CVE
added 2020/02/17 10:15 p.m.73 views

CVE-2015-8751

Integer overflow in the jas_matrix_create function in JasPer allows context-dependent attackers to have unspecified impact via a crafted JPEG 2000 image, related to integer multiplication for memory allocation.

8.8CVSS8.8AI score0.00859EPSS
CVE
CVE
added 2017/03/23 6:59 p.m.73 views

CVE-2016-9387

Integer overflow in the jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.13 allows remote attackers to have unspecified impact via a crafted file, which triggers an assertion failure.

7.8CVSS7.7AI score0.0033EPSS
CVE
CVE
added 2017/03/23 6:59 p.m.73 views

CVE-2016-9392

The calcstepsizes function in jpc_dec.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.

5.5CVSS5.8AI score0.00466EPSS
CVE
CVE
added 2024/04/19 1:15 p.m.73 views

CVE-2024-31744

In Jasper 4.2.2, the jpc_streamlist_remove function in src/libjasper/jpc/jpc_dec.c:2407 has an assertion failure vulnerability, allowing attackers to cause a denial of service attack through a specific image file.

7.5CVSS6.3AI score0.00026EPSS
CVE
CVE
added 2017/08/29 6:29 a.m.72 views

CVE-2017-13745

There is a reachable assertion abort in the function jpc_dec_process_sot() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service attack by triggering an unexpected jpc_ppmstabtostreams return value, a different vulnerability than CVE-2018-9154.

7.5CVSS7.2AI score0.00486EPSS
CVE
CVE
added 2017/03/23 6:59 p.m.70 views

CVE-2016-9390

The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file.

5.5CVSS5.8AI score0.00461EPSS
CVE
CVE
added 2017/03/23 6:59 p.m.69 views

CVE-2016-9262

Multiple integer overflows in the (1) jas_realloc function in base/jas_malloc.c and (2) mem_resize function in base/jas_stream.c in JasPer before 1.900.22 allow remote attackers to cause a denial of service via a crafted image, which triggers use after free vulnerabilities.

5.5CVSS6.1AI score0.00433EPSS
CVE
CVE
added 2017/03/23 6:59 p.m.67 views

CVE-2016-9391

The jpc_bitstream_getbits function in jpc_bs.c in JasPer before 2.0.10 allows remote attackers to cause a denial of service (assertion failure) via a very large integer.

7.5CVSS7.1AI score0.01218EPSS
CVE
CVE
added 2017/03/23 6:59 p.m.66 views

CVE-2016-8887

The jp2_colr_destroy function in libjasper/jp2/jp2_cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (NULL pointer dereference).

5.5CVSS6AI score0.00219EPSS
CVE
CVE
added 2017/03/23 6:59 p.m.62 views

CVE-2016-8886

The jas_malloc function in libjasper/base/jas_malloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted file, which triggers a memory allocation failure.

7.8CVSS7.5AI score0.00317EPSS
CVE
CVE
added 2008/10/02 6:18 p.m.60 views

CVE-2008-3522

Buffer overflow in the jas_stream_printf function in libjasper/base/jas_stream.c in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via vectors related to the mif_hdr_put function and use of vsprintf.

10CVSS5AI score0.05541EPSS
CVE
CVE
added 2022/09/16 10:15 p.m.60 views

CVE-2022-40755

JasPer 3.0.6 allows denial of service via a reachable assertion in the function inttobits in libjasper/base/jas_image.c.

5.5CVSS5.5AI score0.00035EPSS
CVE
CVE
added 2017/08/29 6:29 a.m.58 views

CVE-2017-13749

There is a reachable assertion abort in the function jpc_pi_nextrpcl() in jpc/jpc_t2cod.c in JasPer 2.0.12 that will lead to a remote denial of service attack.

7.5CVSS7.1AI score0.0101EPSS
CVE
CVE
added 2021/07/15 4:15 p.m.58 views

CVE-2021-27845

A Divide-by-zero vulnerability exists in JasPer Image Coding Toolkit 2.0 in jasper/src/libjasper/jpc/jpc_enc.c

5.5CVSS5.2AI score0.00252EPSS
CVE
CVE
added 2024/01/16 2:15 a.m.58 views

CVE-2023-51257

An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code.

7.8CVSS7.7AI score0.00028EPSS
CVE
CVE
added 2008/10/02 6:18 p.m.57 views

CVE-2008-3520

Multiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via a crafted image file, related to integer multiplication for memory allocation.

9.3CVSS4AI score0.02999EPSS
CVE
CVE
added 2008/10/02 6:18 p.m.57 views

CVE-2008-3521

Race condition in the jas_stream_tmpfile function in libjasper/base/jas_stream.c in JasPer 1.900.1 allows local users to cause a denial of service (program exit) by creating the appropriate tmp.XXXXXXXXXX temporary file, which causes Jasper to exit. NOTE: this was originally reported as a symlink i...

7.2CVSS7AI score0.00037EPSS
CVE
CVE
added 2017/03/15 2:59 p.m.57 views

CVE-2017-6850

The jp2_cdef_destroy function in jp2_cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image.

5.5CVSS5.8AI score0.00222EPSS
CVE
CVE
added 2017/08/29 6:29 a.m.56 views

CVE-2017-13752

There is a reachable assertion abort in the function jpc_dequantize() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service attack.

7.5CVSS7.1AI score0.0101EPSS
CVE
CVE
added 2017/09/09 8:29 a.m.56 views

CVE-2017-14229

There is an infinite loop in the jpc_dec_tileinit function in jpc/jpc_dec.c of Jasper 2.0.13. It will lead to a remote denial of service attack.

7.5CVSS7.3AI score0.00744EPSS
CVE
CVE
added 2017/08/29 6:29 a.m.54 views

CVE-2017-13751

There is a reachable assertion abort in the function calcstepsizes() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service attack.

7.5CVSS7.1AI score0.0101EPSS
CVE
CVE
added 2017/03/23 6:59 p.m.53 views

CVE-2016-9395

The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.

5.5CVSS5.7AI score0.00395EPSS
CVE
CVE
added 2017/03/15 2:59 p.m.52 views

CVE-2016-10250

The jp2_colr_destroy function in jp2_cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service (NULL pointer dereference) by leveraging incorrect cleanup of JP2 box data on error. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8887.

7.5CVSS6AI score0.0067EPSS
CVE
CVE
added 2017/03/23 6:59 p.m.51 views

CVE-2016-9397

The jpc_dequantize function in jpc_dec.c in JasPer 1.900.13 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.

7.5CVSS7AI score0.01797EPSS
CVE
CVE
added 2017/08/29 6:29 a.m.51 views

CVE-2017-13747

There is a reachable assertion abort in the function jpc_floorlog2() in jpc/jpc_math.c in JasPer 2.0.12 that will lead to a remote denial of service attack.

7.5CVSS7.1AI score0.0101EPSS
CVE
CVE
added 2017/08/29 6:29 a.m.51 views

CVE-2017-13750

There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1296 in JasPer 2.0.12 that will lead to a remote denial of service attack.

7.5CVSS7.1AI score0.01636EPSS
CVE
CVE
added 2017/03/15 2:59 p.m.51 views

CVE-2017-6852

Heap-based buffer overflow in the jpc_dec_decodepkt function in jpc_t2dec.c in JasPer 2.0.10 allows remote attackers to have unspecified impact via a crafted image.

7.8CVSS7.6AI score0.00595EPSS
CVE
CVE
added 2017/03/23 6:59 p.m.50 views

CVE-2016-9557

Integer overflow in jas_image.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service (application crash) via a crafted file.

5.5CVSS5.8AI score0.00226EPSS
CVE
CVE
added 2017/03/15 2:59 p.m.50 views

CVE-2017-6851

The jas_matrix_bindsub function in jas_seq.c in JasPer 2.0.10 allows remote attackers to cause a denial of service (invalid read) via a crafted image.

5.5CVSS5.7AI score0.00453EPSS
CVE
CVE
added 2018/03/27 4:29 a.m.48 views

CVE-2018-9055

JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_firstone in libjasper/jpc/jpc_math.c.

5.5CVSS5.9AI score0.00434EPSS
CVE
CVE
added 2017/08/29 6:29 a.m.46 views

CVE-2017-13746

There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1297 in JasPer 2.0.12 that will lead to a remote denial of service attack.

7.5CVSS7.1AI score0.01636EPSS
CVE
CVE
added 2019/08/15 5:15 p.m.45 views

CVE-2017-14232

The read_chunk function in flif-dec.cpp in Free Lossless Image Format (FLIF) 0.3 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted flif file.

5.5CVSS6AI score0.00241EPSS
CVE
CVE
added 2017/03/01 3:59 p.m.41 views

CVE-2017-5502

libjasper/jp2/jp2_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value.

5.5CVSS5.3AI score0.00209EPSS
CVE
CVE
added 2017/03/01 3:59 p.m.40 views

CVE-2017-5498

libjasper/include/jasper/jas_math.h in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value.

5.5CVSS5.9AI score0.00209EPSS
CVE
CVE
added 2017/03/01 3:59 p.m.35 views

CVE-2017-5500

libjasper/jpc/jpc_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value.

5.5CVSS5.3AI score0.00209EPSS
CVE
CVE
added 2017/03/01 3:59 p.m.33 views

CVE-2017-5501

Integer overflow in libjasper/jpc/jpc_tsfb.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted file.

5.5CVSS5.5AI score0.00209EPSS
Total number of security vulnerabilities99