A number of overflows were found in jasper causing use after free vulnerability triggeerd by creafted image.
Upstream patch:
https://github.com/mdadams/jasper/commit/634ce8e8a5accc0fa05dd2c20d42b4749d4b2735
Reproducer:
https://github.com/asarubbo/poc/blob/master/00028-jasper-uaf-jasrealloc
CVE assignment:
http://seclists.org/oss-sec/2016/q4/385