| Max CVSS | 6.8 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2016-9560 | 6.8 |
Stack-based buffer overflow in the jpc_tsfb_getbands2 function in jpc_tsfb.c in JasPer before 1.900.30 allows remote attackers to have unspecified impact via a crafted image.
|
15-03-2021 - 22:08 | 15-02-2017 - 19:59 | |
| CVE-2016-8654 | 6.8 |
A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small size. jasper versions before 2.0.0 are affected.
|
09-10-2019 - 23:20 | 01-08-2018 - 16:29 | |
| CVE-2016-8693 | 6.8 |
Double free vulnerability in the mem_close function in jas_stream.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image to the imginfo command.
|
30-10-2018 - 16:27 | 15-02-2017 - 19:59 | |
| CVE-2016-8691 | 4.3 |
The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted XRsiz value in a BMP image to the imginfo command.
|
05-01-2018 - 02:31 | 15-02-2017 - 19:59 | |
| CVE-2016-8692 | 4.3 |
The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted YRsiz value in a BMP image to the imginfo command.
|
05-01-2018 - 02:31 | 15-02-2017 - 19:59 | |
| CVE-2016-1867 | 4.3 |
The jpc_pi_nextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG 2000 image.
|
05-01-2018 - 02:30 | 20-01-2016 - 16:59 | |
| CVE-2016-8882 | 4.3 |
The jpc_dec_tilefini function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file.
|
04-11-2017 - 01:29 | 13-01-2017 - 16:59 |