There is a reachable assertion abort in the function jpcfloorlog2() in jpc/jpcmath.c in JasPer 2.0.12 that will lead to a remote denial of service attack.

There is a reachable assertion abort in the function jpcpinextrpcl() in jpc/jpct2cod.c in JasPer 2.0.12 that will lead to a remote denial of service attack.

There is a reachable assertion abort in the function jpcdequantize() in jpc/jpcdec.c in JasPer 2.0.12 that will lead to a remote denial of service attack.

There is a reachable assertion abort in the function jpcdecprocesssiz() in jpc/jpcdec.c:1296 in JasPer 2.0.12 that will lead to a remote denial of service attack.

There is a reachable assertion abort in the function calcstepsizes() in jpc/jpcdec.c in JasPer 2.0.12 that will lead to a remote denial of service attack.

There are lots of memory leaks in JasPer 2.0.12, triggered in the function jasstrdup() in base/jasstring.c, that will lead to a remote denial of service attack.

There is a reachable assertion abort in the function jpcdecprocesssiz() in jpc/jpcdec.c:1297 in JasPer 2.0.12 that will lead to a remote denial of service attack.

There is a reachable assertion abort in the function jpcdecprocesssot() in jpc/jpcdec.c in JasPer 2.0.12 that will lead to a remote denial of service attack by triggering an unexpected jpcppmstabtostreams return value, a different vulnerability than CVE-2018-9154.

JasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jp2decode function in libjasper/jp2/jp2dec.c.