Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 101

Export CSV
CVE-2015-5221

jasper: use-after-free and double-free flaws in mif_process_cmpt()

Use-after-free vulnerability in the mif_process_cmpt function in libjasper/mif/mif_cod.c in the JasPer JPEG-2000 library before 1.900.2 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file.

CVSS 3.0 · 5.5 Medium EPSS 2.2% KEV · Not listed
Vendors
Fedoraproject Jasper Project Opensuse and 2 more
Products
Fedora Jasper Leap and 3 more
CVE-2016-8692

jasper: missing SIZ marker segment XRsiz and YRsiz fields range check

The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted YRsiz value in a BMP image to the imginfo command.

CVSS 3.0 · 5.5 Medium EPSS 2.2% KEV · Not listed
Vendors
Debian Fedoraproject Jasper Project and 1 more
Products
Debian Linux Fedora Jasper and 1 more
CVE-2016-8691

jasper: missing SIZ marker segment XRsiz and YRsiz fields range check

The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted XRsiz value in a BMP image to the imginfo command.

CVSS 3.0 · 5.5 Medium EPSS 2.2% KEV · Not listed
Vendors
Debian Fedoraproject Jasper Project and 1 more
Products
Debian Linux Fedora Jasper and 1 more
CVE-2016-9396

jasper: reachable assertion in JPC_NOMINALGAIN()

The JPC_NOMINALGAIN function in jpc/jpc_t1cod.c in JasPer through 2.0.12 allows remote attackers to cause a denial of service (JPC_COX_RFT assertion failure) via unspecified vectors.

CVSS 3.0 · 7.5 High EPSS 5.8% KEV · Not listed
Vendors
Jasper Project Redhat
Products
Jasper Enterprise Linux
CVE-2016-8693

jasper: incorrect handling of bufsize 0 in mem_resize()

Double free vulnerability in the mem_close function in jas_stream.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image to the imginfo command.

CVSS 3.0 · 7.8 High EPSS 3.3% KEV · Not listed
Vendors
Fedoraproject Jasper Project Opensuse and 1 more
Products
Fedora Jasper Opensuse and 1 more
CVE-2016-8882

jasper: uninitialized tile->pi pointer use in JPC decoder

The jpc_dec_tilefini function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file.

CVSS 3.0 · 5.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Jasper Project
Products
Jasper
CVE-2016-8883

jasper: reachable asserts in jpc_dec_tiledecode()

The jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.

CVSS 3.0 · 5.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Jasper Project Redhat
Products
Jasper Enterprise Linux
CVE-2016-8884

jasper: missing jas_matrix_create() parameter checks

The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8690.

CVSS 3.0 · 5.5 Medium EPSS 2.4% KEV · Not listed
Vendors
Fedoraproject Jasper Project Redhat
Products
Fedora Jasper Enterprise Linux
CVE-2016-8885

jasper: missing jas_matrix_create() parameter checks

The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image.

CVSS 3.0 · 5.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Jasper Project Redhat
Products
Jasper Enterprise Linux
CVE-2016-8886

jasper: no upper limit on memory allocations in jas_malloc()

The jas_malloc function in libjasper/base/jas_malloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted file, which triggers a memory allocation failure.

CVSS 3.0 · 7.8 High EPSS 1.9% KEV · Not listed
Vendors
Jasper Project
Products
Jasper
CVE-2017-13747

jasper: reachable assertion in jpc_floorlog2()

There is a reachable assertion abort in the function jpc_floorlog2() in jpc/jpc_math.c in JasPer 2.0.12 that will lead to a remote denial of service attack.

CVSS 3.1 · 7.5 High EPSS 3.6% KEV · Not listed
Vendors
Fedoraproject Jasper Project
Products
Fedora Jasper
CVE-2016-8690

jasper: missing jas_matrix_create() parameter checks

The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted BMP image in an imginfo command.

CVSS 3.0 · 5.5 Medium EPSS 2.5% KEV · Not listed
Vendors
Fedoraproject Jasper Project Redhat
Products
Fedora Jasper Enterprise Linux
CVE-2015-5203

jasper: integer overflow in jas_image_cmpt_create()

Double free vulnerability in the jasper_image_stop_load function in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file.

CVSS 3.0 · 5.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Fedoraproject Jasper Project Opensuse and 2 more
Products
Fedora Jasper Leap and 3 more
CVE-2016-9560

jasper: stack-based buffer overflow in jpc_dec_tileinit()

Stack-based buffer overflow in the jpc_tsfb_getbands2 function in jpc_tsfb.c in JasPer before 1.900.30 allows remote attackers to have unspecified impact via a crafted image.

CVSS 3.1 · 7.8 High EPSS 2.9% KEV · Not listed
Vendors
Debian Jasper Project Redhat
Products
Debian Linux Jasper Enterprise Linux and 6 more
CVE-2016-9394

jasper: insufficient SIZ marker segment data sanity checks

The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.

CVSS 3.0 · 5.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Jasper Project Redhat
Products
Jasper Enterprise Linux
CVE-2016-9393

jasper: insufficient SIZ marker segment data sanity checks

The jpc_pi_nextrpcl function in jpc_t2cod.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.

CVSS 3.0 · 5.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Jasper Project Redhat
Products
Jasper Enterprise Linux
CVE-2016-9557

jasper: signed integer overflow in jas_image_create()

Integer overflow in jas_image.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service (application crash) via a crafted file.

CVSS 3.0 · 5.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Jasper Project
Products
Jasper
CVE-2017-1000050

jasper: NULL pointer exception in jp2_encode()

JasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2_encode which failed to check to see if the image contained at least one component resulting in a denial-of-service.

CVSS 3.1 · 7.5 High EPSS 3.3% KEV · Not listed
Vendors
Canonical Fedoraproject Jasper Project and 1 more
Products
Ubuntu Linux Fedora Jasper and 4 more
CVE-2016-9392

jasper: insufficient SIZ marker segment data sanity checks

The calcstepsizes function in jpc_dec.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.

CVSS 3.0 · 5.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Jasper Project Redhat
Products
Jasper Enterprise Linux
CVE-2016-9391

jasper: reachable assertions in the JPC bitstream code

The jpc_bitstream_getbits function in jpc_bs.c in JasPer before 2.0.10 allows remote attackers to cause a denial of service (assertion failure) via a very large integer.

CVSS 3.0 · 7.5 High EPSS 4.3% KEV · Not listed
Vendors
Jasper Project Redhat
Products
Jasper Enterprise Linux