Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 101

Export CSV
CVE-2017-5498

jasper: Left shift of negative value in jas_fast32_asl() in jas_math.h

libjasper/include/jasper/jas_math.h in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value.

CVSS 3.0 · 5.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Jasper Project
Products
Jasper
CVE-2017-5499

jasper: Signed integer overflow in jpc_dequantize() in jpc_dec.c

Integer overflow in libjasper/jpc/jpc_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted file.

CVSS 3.0 · 5.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Jasper Project
Products
Jasper
CVE-2017-5500

jasper: Invalid exponent shift in jpc_calcabsstepsize() in jpc_dec.c

libjasper/jpc/jpc_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value.

CVSS 3.0 · 5.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Jasper Project
Products
Jasper
CVE-2017-5501

jasper: Signed integer overflow in jpc_tsfb_getbands2() in jpc_tsfb.c

Integer overflow in libjasper/jpc/jpc_tsfb.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted file.

CVSS 3.0 · 5.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Jasper Project
Products
Jasper
CVE-2017-5502

jasper: Left shift of negative value in jp2_validate() in jp2_dec.c

libjasper/jp2/jp2_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value.

CVSS 3.0 · 5.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Jasper Project
Products
Jasper
CVE-2017-5504

jasper: Invalid memory read in jpc_undo_roi

The jpc_undo_roi function in libjasper/jpc/jpc_dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted image.

CVSS 3.0 · 5.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Jasper Project
Products
Jasper
CVE-2017-5505

jasper: Invalid memory read in jas_matrix_asl

The jas_matrix_asl function in jas_seq.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted image.

CVSS 3.0 · 5.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Jasper Project
Products
Jasper
CVE-2017-6850

jasper: uninitialized pointer use in jp2_cdef_destroy()

The jp2_cdef_destroy function in jp2_cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image.

CVSS 3.0 · 5.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Jasper Project
Products
Jasper
CVE-2017-6851

jasper: Invalid memory read in jas_matrix_bindsub (jas_seq.c)

The jas_matrix_bindsub function in jas_seq.c in JasPer 2.0.10 allows remote attackers to cause a denial of service (invalid read) via a crafted image.

CVSS 3.0 · 5.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Jasper Project
Products
Jasper
CVE-2017-6852

jasper: Out of bounds heap read in jpc_dec_decodepkt

Heap-based buffer overflow in the jpc_dec_decodepkt function in jpc_t2dec.c in JasPer 2.0.10 allows remote attackers to have unspecified impact via a crafted image.

CVSS 3.0 · 7.8 High EPSS 1.9% KEV · Not listed
Vendors
Jasper Project
Products
Jasper
CVE-2017-9782

jasper: cdef.ents[] heap-based buffer over-read in jp2_decode()

JasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jp2_decode function in libjasper/jp2/jp2_dec.c.

CVSS 3.0 · 5.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Jasper Project
Products
Jasper
CVE-2014-8138

jasper: heap overflow in jp2_decode() (oCERT-2014-012)

Heap-based buffer overflow in the jp2_decode function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 file.

CVSS 2.0 · 7.5 High EPSS 18.5% KEV · Not listed
Vendors
Jasper Project Redhat
Products
Jasper Enterprise Linux Rhev Manager
CVE-2014-8137

jasper: double-free in in jas_iccattrval_destroy() (oCERT-2014-012)

Double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file.

CVSS 2.0 · 6.8 Medium EPSS 14.5% KEV · Not listed
Vendors
Jasper Project Redhat
Products
Jasper Enterprise Linux Rhev Manager
CVE-2016-2116

jasper: memory leak in jas_iccprof_createfrombuf()

Memory leak in the jas_iccprof_createfrombuf function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted ICC color profile in a JPEG 2000 image file.

CVSS 3.0 · 5.7 Medium EPSS 3.0% KEV · Not listed
Vendors
Canonical Jasper Project Redhat
Products
Ubuntu Linux Jasper Enterprise Linux
CVE-2016-2089

jasper: matrix rows_ NULL pointer dereference in jas_matrix_clip()

The jas_matrix_clip function in jas_seq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted JPEG 2000 image.

CVSS 3.0 · 6.5 Medium EPSS 3.0% KEV · Not listed
Vendors
Jasper Project Redhat
Products
Jasper Enterprise Linux
CVE-2016-1867

jasper: out-of-bounds read in jpc_pi_nextcprl()

The jpc_pi_nextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG 2000 image.

CVSS 3.0 · 6.5 Medium EPSS 2.3% KEV · Not listed
Vendors
Jasper Project Redhat
Products
Jasper Enterprise Linux
CVE-2016-1577

jasper: double free issue in jas_iccattrval_destroy()

Double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file, a different vulnerability than CVE-2014-8137.

CVSS 3.0 · 7.6 High EPSS 3.3% KEV · Not listed
Vendors
Canonical Jasper Project Redhat
Products
Ubuntu Linux Jasper Enterprise Linux
CVE-2014-9029

jasper: incorrect component number check in COC, RGN and QCC marker segment decoders (oCERT-2014-009)

Multiple off-by-one errors in the (1) jpc_dec_cp_setfromcox and (2) jpc_dec_cp_setfromrgn functions in jpc/jpc_dec.c in JasPer 1.900.1 and earlier allow remote attackers to execute arbitrary code via a crafted jp2 file, which triggers a heap-based buffer overflow.

CVSS 2.0 · 7.5 High EPSS 18.2% KEV · Not listed
Vendors
Jasper Project Redhat
Products
Jasper Enterprise Linux Rhev Manager
CVE-2014-8158

jasper: unrestricted stack memory use in jpc_qmfb.c (oCERT-2015-001)

Multiple stack-based buffer overflows in jpc_qmfb.c in JasPer 1.900.1 and earlier allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 image.

CVSS 2.0 · 6.8 Medium EPSS 14.4% KEV · Not listed
Vendors
Debian Jasper Project Opensuse and 1 more
Products
Debian Linux Jasper Opensuse and 2 more
CVE-2014-8157

jasper: dec->numtiles off-by-one check in jpc_dec_process_sot() (oCERT-2015-001)

Off-by-one error in the jpc_dec_process_sot function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 image, which triggers a heap-based buffer overflow.

CVSS 2.0 · 7.5 High EPSS 16.9% KEV · Not listed
Vendors
Debian Jasper Project Opensuse and 1 more
Products
Debian Linux Jasper Opensuse and 2 more