A memory leak bug in jasper 3.0.6 in function cmdoptsparse.
https://github.com/jasper-software/jasper/issues/332 https://github.com/jasper-software/jasper/commit/d99636fad60629785efd1ef72da772a8ef68f54c
A Divide-by-zero vulnerability exists in JasPer Image Coding Toolkit 2.0 in jasper/src/libjasper/jpc/jpcenc.c
Integer overflow in the jasmatrixcreate function in JasPer allows context-dependent attackers to have unspecified impact via a crafted JPEG 2000 image, related to integer multiplication for memory allocation.
The readchunk function in flif-dec.cpp in Free Lossless Image Format (FLIF) 0.3 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted flif file.
JasPer 2.0.14 has a memory leak in base/jasmalloc.c in libjasper.a when "--output-format jp2" is used.
JasPer 2.0.14 allows remote attackers to cause a denial of service (application hang) via an attempted conversion to the jp2 format.
jp2encode in jp2/jp2enc.c in JasPer 2.0.14 has a heap-based buffer over-read.
An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function rasputdatastd in ras/rasenc.c.
There is an infinite loop in the jpcdectileinit function in jpc/jpcdec.c of Jasper 2.0.13. It will lead to a remote denial of service attack.
JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jasimageishomosamp function in libjasper/base/jasimage.c.
There is a reachable assertion abort in the function jpcfloorlog2() in jpc/jpcmath.c in JasPer 2.0.12 that will lead to a remote denial of service attack.
There is a reachable assertion abort in the function jpcpinextrpcl() in jpc/jpct2cod.c in JasPer 2.0.12 that will lead to a remote denial of service attack.
There is a reachable assertion abort in the function jpcdequantize() in jpc/jpcdec.c in JasPer 2.0.12 that will lead to a remote denial of service attack.
There is a reachable assertion abort in the function jpcdecprocesssiz() in jpc/jpcdec.c:1296 in JasPer 2.0.12 that will lead to a remote denial of service attack.
There is a reachable assertion abort in the function calcstepsizes() in jpc/jpcdec.c in JasPer 2.0.12 that will lead to a remote denial of service attack.
There are lots of memory leaks in JasPer 2.0.12, triggered in the function jasstrdup() in base/jasstring.c, that will lead to a remote denial of service attack.
There is a reachable assertion abort in the function jpcdecprocesssiz() in jpc/jpcdec.c:1297 in JasPer 2.0.12 that will lead to a remote denial of service attack.
JasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jp2decode function in libjasper/jp2/jp2dec.c.
The bmpgetdata function in libjasper/bmp/bmpdec.c in JasPer 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8690.
The bmpgetdata function in libjasper/bmp/bmpdec.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image.
Last updated 24 July 2024
Last updated 24 July 2024
An integer overflow vulnerability that results into use of uninitialized value in jpcpinextcprl was found.
Upstream patch:
https://github.com/mdadams/jasper/commit/1f0dfe5a42911b6880a1445f13f6d615ddb55387
Reference:
http://seclists.org/oss-sec/2017/q1/609
A use-after-free flaw was found in the way JasPer decoded certain JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash.
Upstream issue (including a reproducer);
https://github.com/mdadams/jasper/issues/105
An out-of-bounds heap read vulnerability was found in jpcpinextpcrl() function of jasper when processing crafted input.
Upstream bug:
https://github.com/mdadams/jasper/issues/103
Upstream patch:
https://github.com/mdadams/jasper/commit/99a50593254d1b53002719bbecfc946c84b23d27
Acknowledgments:
Name: Liu Bingchang (IIE)
A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small size.
Upstream bugs:
https://github.com/mdadams/jasper/issues/93 https://github.com/mdadams/jasper/issues/94
Upstream patch:
https://github.com/mdadams/jasper/commit/4a59cfaf9ab3d48fca4a15c0d2674bf7138e3d1a
An integer overflow vulnerability was found in jasper in jasimage.c triggered by parsing of a maliciously crafted file.
Upstream patch:
https://github.com/mdadams/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a
References:
http://seclists.org/oss-sec/2016/q4/470
An assertion failure was possible to trigger in calcstepsizes.
CVE assignment:
http://seclists.org/oss-sec/2016/q4/441
An assertion failure was possible to trigger in jpcfloorlog2.
CVE assignment:
http://seclists.org/oss-sec/2016/q4/441
An assertion failure was possible to trigger in jpcdequantize.
CVE assignment:
http://seclists.org/oss-sec/2016/q4/441