Browse CVEs

HIGH 7.8 CVE-2025-8837 A vulnerability was identified in JasPer up to 4.2.5. This affects the function jpc_dec_dump of the file src/libjasper/jpc/jpc_dec.c of the component… Jasper after 4.2.5 Fix from $1,9502025-08-11 MEDIUM 5.5 CVE-2025-8835 A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jas_image_chclrspc of the file src/libjasper/base/jas… Jasper after 4.2.5 Fix from $1,6002025-08-11 HIGH 7.8 CVE-2023-51257 An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code. Jasper after 4.1.1 Fix from $1,9502024-01-16 MEDIUM 5.5 CVE-2022-40755 JasPer 3.0.6 allows denial of service via a reachable assertion in the function inttobits in libjasper/base/jas_image.c. Jasper No fix yet Fix from $1,6002022-09-16 MEDIUM 5.5 CVE-2021-27845 A Divide-by-zero vulnerability exists in JasPer Image Coding Toolkit 2.0 in jasper/src/libjasper/jpc/jpc_enc.c Jasper 2.0.17+ Fix from $1,6002021-07-15 HIGH 8.8 CVE-2015-8751 Integer overflow in the jas_matrix_create function in JasPer allows context-dependent attackers to have unspecified impact via a crafted JPEG 2000 im… Jasper 1.900.4+ Fix from $1,9502020-02-17 HIGH 7.5 CVE-2018-9154 There is a reachable abort in the function jpc_dec_process_sot in libjasper/jpc/jpc_dec.c of JasPer 2.0.14 that will lead to a remote denial of servi… Jasper No fix yet Fix from $1,9502018-05-04 MEDIUM 6.5 CVE-2018-9252 JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_abstorelstepsize in libjasper/jpc/jpc_enc.c. Jasper No fix yet Fix from $1,6002018-04-04 MEDIUM 5.5 CVE-2018-9055 JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_firstone in libjasper/jpc/jpc_math.c. Jasper No fix yet Fix from $1,6002018-03-27 HIGH 7.5 CVE-2017-14229 There is an infinite loop in the jpc_dec_tileinit function in jpc/jpc_dec.c of Jasper 2.0.13. It will lead to a remote denial of service attack. Jasper Mitigation only Fix from $1,9502017-09-09 HIGH 7.5 CVE-2017-13745 There is a reachable assertion abort in the function jpc_dec_process_sot() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of ser… Jasper Mitigation only Fix from $1,9502017-08-29 MEDIUM 5.5 CVE-2017-9782 JasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related t… Jasper Patch available Fix from $1,6002017-06-21 MEDIUM 5.5 CVE-2016-9557 Integer overflow in jas_image.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service (application crash) via a crafted file. Jasper after 1.900.24 Fix from $1,6002017-03-23 HIGH 7.8 CVE-2016-8886 The jas_malloc function in libjasper/base/jas_malloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted fil… Jasper after 1.900.10 Fix from $1,9502017-03-23 HIGH 7.8 CVE-2016-9387 Integer overflow in the jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.13 allows remote attackers to have unspecified… Jasper after 1.900.12 Fix from $1,9502017-03-23 HIGH 7.5 CVE-2016-9389 The jpc_irct and jpc_iict functions in jpc_mct.c in JasPer before 1.900.14 allow remote attackers to cause a denial of service (assertion failure). Jasper after 1.900.13 Fix from $1,9502017-03-23 HIGH 7.5 CVE-2016-9391 The jpc_bitstream_getbits function in jpc_bs.c in JasPer before 2.0.10 allows remote attackers to cause a denial of service (assertion failure) via a… Jasper after 2.0.6 Fix from $1,9502017-03-23 HIGH 7.5 CVE-2016-9396EPSS 6% The JPC_NOMINALGAIN function in jpc/jpc_t1cod.c in JasPer through 2.0.12 allows remote attackers to cause a denial of service (JPC_COX_RFT assertion … Jasper after 1.900.11 Fix from $1,9502017-03-23 MEDIUM 5.5 CVE-2016-8885 The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer deref… Jasper after 1.900.8 Fix from $1,6002017-03-23 MEDIUM 5.5 CVE-2016-9262 Multiple integer overflows in the (1) jas_realloc function in base/jas_malloc.c and (2) mem_resize function in base/jas_stream.c in JasPer before 1.9… Jasper after 1.900.21 Fix from $1,6002017-03-23 MEDIUM 5.5 CVE-2016-9390 The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a c… Jasper after 1.900.13 Fix from $1,6002017-03-23 MEDIUM 5.5 CVE-2016-9392 The calcstepsizes function in jpc_dec.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a craf… Jasper after 1.900.16 Fix from $1,6002017-03-23 MEDIUM 5.5 CVE-2016-9393 The jpc_pi_nextrpcl function in jpc_t2cod.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a … Jasper Patch available Fix from $1,6002017-03-23 MEDIUM 5.5 CVE-2016-9394 The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a c… Jasper after 1.900.16 Fix from $1,6002017-03-23 MEDIUM 5.5 CVE-2016-9395 The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service (assertion failure) via a c… Jasper after 1.900.24 Fix from $1,6002017-03-23 MEDIUM 5.5 CVE-2017-5505 The jas_matrix_asl function in jas_seq.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and crash) via … Jasper No fix yet Fix from $1,6002017-03-16 HIGH 7.8 CVE-2017-6852 Heap-based buffer overflow in the jpc_dec_decodepkt function in jpc_t2dec.c in JasPer 2.0.10 allows remote attackers to have unspecified impact via a… Jasper after 2.0.9 Fix from $1,9502017-03-15 MEDIUM 5.5 CVE-2017-6850 The jp2_cdef_destroy function in jp2_cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) vi… Jasper after 2.0.12 Fix from $1,6002017-03-15 MEDIUM 5.5 CVE-2017-6851 The jas_matrix_bindsub function in jas_seq.c in JasPer 2.0.10 allows remote attackers to cause a denial of service (invalid read) via a crafted image. Jasper after 2.0.9 Fix from $1,6002017-03-15 HIGH 7.8 CVE-2016-10249 Integer overflow in the jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.12 allows remote attackers to have unspecified impact via a c… Jasper after 1.900.11 Fix from $1,9502017-03-15