CVE-2016-1867: Buffer Overflow
A vulnerability was found in the way the JasPer's jpcpinextcprl() function parses certain JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash.
Report with the reproducer attached: http://seclists.org/oss-sec/2016/q1/84
Other sources
The jpcpinextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG 2000 image.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1867?
CVE-2016-1867 is considered a high severity vulnerability due to its potential to crash applications processing vulnerable JPEG 2000 files.
How do I fix CVE-2016-1867?
To fix CVE-2016-1867, update your JasPer package to version 1.900.2 or later if you are using Red Hat, or ensure your Debian installation is patched.
Which applications are affected by CVE-2016-1867?
Applications using the JasPer library to process JPEG 2000 images are affected by CVE-2016-1867.
What causes the crash in CVE-2016-1867?
The crash in CVE-2016-1867 is caused by improper parsing of specially crafted JPEG 2000 image files in the jpc_pi_nextcprl() function.
Is CVE-2016-1867 present in Jasper version 1.900.1?
Yes, CVE-2016-1867 is present in Jasper version 1.900.1 and earlier.