CVSS: 7.8EPSS: 1%CPEs: 1EXPL: 0CVE-2016-8886
https://notcve.org/view.php?id=CVE-2016-8886
23 Mar 2017 — The jas_malloc function in libjasper/base/jas_malloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted file, which triggers a memory allocation failure. La función The jas_malloc libjasper/base/jas_malloc.c en JasPer en versiones anteriores a 1.900.11 permite atacantes remotos tener impacto no especificado a través de un archivo manipulado, lo que desencadena un fallo en la asignación de memoria. • http://www.openwall.com/lists/oss-security/2016/10/23/2 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 1%CPEs: 3EXPL: 0CVE-2016-9397
https://notcve.org/view.php?id=CVE-2016-9397
23 Mar 2017 — The jpc_dequantize function in jpc_dec.c in JasPer 1.900.13 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors. La función jpc_dequantize en jpc_dec.c en JasPer 1.900.13 permite a atacantes remotos provocar una denegación de servicio (fallo de aserción) a través de vectores no especificados. • http://www.openwall.com/lists/oss-security/2016/11/17/1 • CWE-617: Reachable Assertion •
CVSS: 7.0EPSS: 1%CPEs: 1EXPL: 0CVE-2016-8885 – jasper: missing jas_matrix_create() parameter checks
https://notcve.org/view.php?id=CVE-2016-8885
23 Mar 2017 — The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image. La función bmp_getdata en libjasper/bmp/bmp_dec.c en JasPer en versiones anteriores a 1.900.9 permite a atacantes remotos provocar una denegación de servicio (desreferencia de puntero null) llamando al comando imginfo con una imagen BMP manipulada. JasPer is an implementation of Part 1 of the JPEG... • http://www.openwall.com/lists/oss-security/2016/10/23/1 • CWE-20: Improper Input Validation CWE-476: NULL Pointer Dereference •
CVSS: 7.5EPSS: 1%CPEs: 5EXPL: 0CVE-2016-9399
https://notcve.org/view.php?id=CVE-2016-9399
23 Mar 2017 — The calcstepsizes function in jpc_dec.c in JasPer 1.900.22 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors. La función calcstepsizes en jpc_dec.c en JasPer 1.900.22 permite a atacantes remotos provocar una denegación de servicio (fallo de aserción) a través de vectores no especificados. • http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html • CWE-617: Reachable Assertion •
CVSS: 7.0EPSS: 1%CPEs: 1EXPL: 0CVE-2016-9262 – jasper: integer truncation in jas_image_cmpt_create()
https://notcve.org/view.php?id=CVE-2016-9262
23 Mar 2017 — Multiple integer overflows in the (1) jas_realloc function in base/jas_malloc.c and (2) mem_resize function in base/jas_stream.c in JasPer before 1.900.22 allow remote attackers to cause a denial of service via a crafted image, which triggers use after free vulnerabilities. Múltiples desbordamientos de entero en la función (1) jas_realloc en base/jas_malloc.c y función (2) mem_resize en base/jas_stream.c en JasPer en versiones anteriores a 1.900.22 permiten a atacantes remotos provocar una denegación de ser... • http://www.openwall.com/lists/oss-security/2016/11/10/4 • CWE-190: Integer Overflow or Wraparound CWE-681: Incorrect Conversion between Numeric Types •
CVSS: 7.5EPSS: 2%CPEs: 1EXPL: 0CVE-2016-9389 – jasper: reachable assertions caused by insufficient component domains checks in ICT/RCT in JPC codec
https://notcve.org/view.php?id=CVE-2016-9389
23 Mar 2017 — The jpc_irct and jpc_iict functions in jpc_mct.c in JasPer before 1.900.14 allow remote attackers to cause a denial of service (assertion failure). Las funciones jpc_irct y jpc_iict en jpc_mct.c en JasPer en versiones anteriores a 1.900.14 permiten a atacantes remotos provocar una denegación de servicio (fallo de aserción). It was discovered that JasPer incorrectly handled certain malformed JPEG-2000 image files. If a user or automated system using JasPer were tricked into opening a specially crafted image,... • http://www.openwall.com/lists/oss-security/2016/11/17/1 • CWE-617: Reachable Assertion •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2016-9388 – jasper: reachable assertions in RAS encoder/decoder
https://notcve.org/view.php?id=CVE-2016-9388
23 Mar 2017 — The ras_getcmap function in ras_dec.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file. La función ras_getcmap de ras_dec.c en JasPer en versiones anteriores a 1.900.14 permite a atacantes remotos provocar una denegación de servicio (fallo de aserción) a través de un archivo de imagen manipulado. It was discovered that JasPer incorrectly handled certain malformed JPEG-2000 image files. If a user or automated system using JasPer were ... • http://www.openwall.com/lists/oss-security/2016/11/17/1 • CWE-617: Reachable Assertion •
CVSS: 7.5EPSS: 2%CPEs: 1EXPL: 0CVE-2016-9396 – jasper: reachable assertion in JPC_NOMINALGAIN()
https://notcve.org/view.php?id=CVE-2016-9396
23 Mar 2017 — The JPC_NOMINALGAIN function in jpc/jpc_t1cod.c in JasPer through 2.0.12 allows remote attackers to cause a denial of service (JPC_COX_RFT assertion failure) via unspecified vectors. La función JPC_NOMINALGAIN en jpc/jpc_t1cod.c en JasPer en la versión 2.0.12 permite a los atacantes remotos causar una denegación de servicio (fallo de aserción JPC_COX_RFT) mediante vectores no especificados. It was discovered that JasPer incorrectly handled certain malformed JPEG-2000 image files. If a user or automated syst... • http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00004.html • CWE-617: Reachable Assertion •
CVSS: 5.5EPSS: 2%CPEs: 1EXPL: 0CVE-2016-9393 – jasper: insufficient SIZ marker segment data sanity checks
https://notcve.org/view.php?id=CVE-2016-9393
23 Mar 2017 — The jpc_pi_nextrpcl function in jpc_t2cod.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file. La función jpc_pi_nextrpcl en jpc_t2cod.c en JasPer en versiones anteriores a 1.900.17 permite a atacantes remotos provocar una denegación de servicio (fallo de aserción) a través de un archivo manipulado. It was discovered that JasPer incorrectly handled certain malformed JPEG-2000 image files. If a user or automated system using JasPer were tric... • http://www.openwall.com/lists/oss-security/2016/11/17/1 • CWE-617: Reachable Assertion •
CVSS: 5.5EPSS: 1%CPEs: 1EXPL: 0CVE-2016-9390 – jasper: insufficient SIZ marker tilexoff and tileyoff checks
https://notcve.org/view.php?id=CVE-2016-9390
23 Mar 2017 — The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file. La función jas_seq2d_create en jas_seq.c en JasPer en versiones anteriores a 1.900.14 permite a atacantes remotos provocar una denegación de servicio (fallo de aserción) a través de un archivo de imagen manipulado. It was discovered that JasPer incorrectly handled certain malformed JPEG-2000 image files. If a user or automated system using Ja... • http://www.openwall.com/lists/oss-security/2016/11/17/1 • CWE-20: Improper Input Validation CWE-617: Reachable Assertion •