jasper_project Vulnerability Advisory Catalog

Total 92 security vulnerabilities recorded for jasper_project software and firmware.

← Back to All Vendors
Component: jasper

A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small size. jasper versions before ...

📅 2018-08-01
CVSS 7.8 Dossier →
Component: jasper

There is a reachable abort in the function jpc_dec_process_sot in libjasper/jpc/jpc_dec.c of JasPer 2.0.14 that will lead to a remote denial of servic...

📅 2018-05-04
CVSS 7.5 Dossier →
CVE-2018-9252 MEDIUM
Component: jasper

JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_abstorelstepsize in libjasper/jpc/jpc_enc.c....

📅 2018-04-04
CVSS 6.5 Dossier →
CVE-2018-9055 MEDIUM
Component: jasper

JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_firstone in libjasper/jpc/jpc_math.c....

📅 2018-03-27
CVSS 5.5 Dossier →
CVE-2016-9600 MEDIUM
Component: jasper

JasPer before version 2.0.10 is vulnerable to a null pointer dereference was found in the decoded creation of JPEG 2000 image files. A specially craft...

📅 2018-03-12
CVSS 6.5 Dossier →
CVE-2016-9591 MEDIUM
Component: jasper

JasPer before version 2.0.12 is vulnerable to a use-after-free in the way it decodes certain JPEG 2000 image files resulting in a crash on the applica...

📅 2018-03-09
CVSS 5.5 Dossier →
Component: jasper

There is an infinite loop in the jpc_dec_tileinit function in jpc/jpc_dec.c of Jasper 2.0.13. It will lead to a remote denial of service attack....

📅 2017-09-09
CVSS 7.5 Dossier →
Component: jasper

JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900...

📅 2017-09-04
CVSS 6.5 Dossier →
Component: jasper

There is a reachable assertion abort in the function jpc_dequantize() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service a...

📅 2017-08-29
CVSS 7.5 Dossier →
Component: jasper

There is a reachable assertion abort in the function calcstepsizes() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service at...

📅 2017-08-29
CVSS 7.5 Dossier →
Component: jasper

There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1296 in JasPer 2.0.12 that will lead to a remote denial of...

📅 2017-08-29
CVSS 7.5 Dossier →
Component: jasper

There is a reachable assertion abort in the function jpc_pi_nextrpcl() in jpc/jpc_t2cod.c in JasPer 2.0.12 that will lead to a remote denial of servic...

📅 2017-08-29
CVSS 7.5 Dossier →
Component: jasper

There are lots of memory leaks in JasPer 2.0.12, triggered in the function jas_strdup() in base/jas_string.c, that will lead to a remote denial of ser...

📅 2017-08-29
CVSS 7.5 Dossier →
Component: jasper

There is a reachable assertion abort in the function jpc_floorlog2() in jpc/jpc_math.c in JasPer 2.0.12 that will lead to a remote denial of service a...

📅 2017-08-29
CVSS 7.5 Dossier →
Component: jasper

There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1297 in JasPer 2.0.12 that will lead to a remote denial of...

📅 2017-08-29
CVSS 7.5 Dossier →
Component: jasper

There is a reachable assertion abort in the function jpc_dec_process_sot() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of serv...

📅 2017-08-29
CVSS 7.5 Dossier →
Component: jasper

JasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2_encode which failed to check to see if the image contained at least one co...

📅 2017-07-17
CVSS 7.5 Dossier →
CVE-2017-9782 MEDIUM
Component: jasper

JasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to...

📅 2017-06-21
CVSS 5.5 Dossier →
CVE-2016-8884 MEDIUM
Component: jasper

The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) ...

📅 2017-03-28
CVSS 5.5 Dossier →
CVE-2016-9557 MEDIUM
Component: jasper

Integer overflow in jas_image.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service (application crash) via a crafted file....

📅 2017-03-23
CVSS 5.5 Dossier →
Component: jasper

The calcstepsizes function in jpc_dec.c in JasPer 1.900.22 allows remote attackers to cause a denial of service (assertion failure) via unspecified ve...

📅 2017-03-23
CVSS 7.5 Dossier →
Component: jasper

The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspec...

📅 2017-03-23
CVSS 7.5 Dossier →
Component: jasper

The jpc_dequantize function in jpc_dec.c in JasPer 1.900.13 allows remote attackers to cause a denial of service (assertion failure) via unspecified v...

📅 2017-03-23
CVSS 7.5 Dossier →
Component: jasper

The JPC_NOMINALGAIN function in jpc/jpc_t1cod.c in JasPer through 2.0.12 allows remote attackers to cause a denial of service (JPC_COX_RFT assertion f...

📅 2017-03-23
CVSS 7.5 Dossier →
Page 2 of 4 (92 Total Records)