Browse CVEs

HIGH 7.8 CVE-2016-10251 Integer overflow in the jpc_pi_nextcprl function in jpc_t2cod.c in JasPer before 1.900.20 allows remote attackers to have unspecified impact via a cr… Jasper after 1.900.19 Fix from $1,9502017-03-15 HIGH 7.5 CVE-2016-10248 The jpc_tsfb_synthesize function in jpc_tsfb.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer dereferenc… Jasper after 1.900.8 Fix from $1,9502017-03-15 HIGH 7.5 CVE-2016-10250 The jp2_colr_destroy function in jp2_cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service (NULL pointer dereference) … Jasper after 1.900.12 Fix from $1,9502017-03-15 MEDIUM 5.5 CVE-2017-5498 libjasper/include/jasper/jas_math.h in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via vectors involving left shift … Jasper No fix yet Fix from $1,6002017-03-01 MEDIUM 5.5 CVE-2017-5499 Integer overflow in libjasper/jpc/jpc_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted file. Jasper No fix yet Fix from $1,6002017-03-01 MEDIUM 5.5 CVE-2017-5500 libjasper/jpc/jpc_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negativ… Jasper No fix yet Fix from $1,6002017-03-01 MEDIUM 5.5 CVE-2017-5501 Integer overflow in libjasper/jpc/jpc_tsfb.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted file. Jasper No fix yet Fix from $1,6002017-03-01 MEDIUM 5.5 CVE-2017-5502 libjasper/jp2/jp2_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negativ… Jasper No fix yet Fix from $1,6002017-03-01 MEDIUM 5.5 CVE-2017-5503 The dec_clnpass function in libjasper/jpc/jpc_t1dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory write a… Jasper No fix yet Fix from $1,6002017-03-01 MEDIUM 5.5 CVE-2017-5504 The jpc_undo_roi function in libjasper/jpc/jpc_dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and… Jasper No fix yet Fix from $1,6002017-03-01 MEDIUM 5.5 CVE-2016-8882 The jpc_dec_tilefini function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service (NULL pointer … Jasper after 1.900.7 Fix from $1,6002017-01-13 MEDIUM 5.5 CVE-2016-8883 The jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service (assertion failure) via a … Jasper after 1.900.7 Fix from $1,6002017-01-13 MEDIUM 6.5 CVE-2016-2089 The jas_matrix_clip function in jas_seq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service (invalid read and application crash)… Jasper Mitigation only Fix from $1,6002016-02-08 MEDIUM 6.5 CVE-2016-1867 The jpc_pi_nextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a … Jasper Mitigation only Fix from $1,6002016-01-20 HIGH 7.5 CVE-2014-9029EPSS 18% Multiple off-by-one errors in the (1) jpc_dec_cp_setfromcox and (2) jpc_dec_cp_setfromrgn functions in jpc/jpc_dec.c in JasPer 1.900.1 and earlier al… Jasper after 1.900.1 Fix from $1,9502014-12-08 HIGH 9.3 CVE-2008-3520 Multiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via a crafted image file, related to i… Jasper Patch available Fix from $1,9502008-10-02 HIGH 7.2 CVE-2008-3521 Race condition in the jas_stream_tmpfile function in libjasper/base/jas_stream.c in JasPer 1.900.1 allows local users to cause a denial of service (p… Jasper No fix yet Fix from $1,9502008-10-02