CVE-2016-9262: Integer Overflow

Published Nov 10, 2016
·
Updated

A number of overflows were found in jasper causing use after free vulnerability triggeerd by creafted image.

Upstream patch:

https://github.com/mdadams/jasper/commit/634ce8e8a5accc0fa05dd2c20d42b4749d4b2735

Reproducer:

https://github.com/asarubbo/poc/blob/master/00028-jasper-uaf-jasrealloc

CVE assignment:

http://seclists.org/oss-sec/2016/q4/385

Other sources

Multiple integer overflows in the (1) jasrealloc function in base/jasmalloc.c and (2) memresize function in base/jasstream.c in JasPer before 1.900.22 allow remote attackers to cause a denial of service via a crafted image, which triggers use after free vulnerabilities.

Launchpad

Affected Software

3 affected componentsFixes available
debian/jasper
redhat/jasper<1.900.22
1.900.22
Jasper Project Jasper<=1.900.21

Event History

Mar 23, 2017
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Jan 11, 2024
Data Sourced
via Launchpad·10:21 PM
Description
Sep 14, 2024
Data Sourced
via Ubuntu·03:56 PM
RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2016-9262?

CVE-2016-9262 is classified as a moderate severity vulnerability due to the potential for use after free exploitation.

2

How do I fix CVE-2016-9262?

To fix CVE-2016-9262, users should upgrade to jasper version 1.900.22 or later on Red Hat systems.

3

What types of software are affected by CVE-2016-9262?

CVE-2016-9262 affects the jasper image processing software across various distributions including Debian and Red Hat.

4

What are the potential consequences of CVE-2016-9262 exploitation?

Exploitation of CVE-2016-9262 could lead to arbitrary code execution and system compromise through crafted images.

5

Is there a patch available for CVE-2016-9262?

Yes, a patch for CVE-2016-9262 is included in jasper version 1.900.22 and later.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203