Jasper Project Jasper 1.900.27

CPE Details

Jasper Project Jasper 1.900.27
jasper_project
jasper
1.900.27
2019-06-10
16h53 +00:00
2019-06-10
16h53 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:jasper_project:jasper:1.900.27:*:*:*:*:*:*:*

Informations

Vendor

jasper_project

Product

jasper

Version

1.900.27

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2023-51257 2024-01-15 23h00 +00:00 An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code.
7.8
High
CVE-2021-3467 2021-03-25 17h45 +00:00 A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.26 handled component references in CDEF box in the JP2 image format decoder. A specially crafted JP2 image file could cause an application using the Jasper library to crash when opened.
5.5
Medium
CVE-2021-3443 2021-03-25 17h45 +00:00 A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.27 handled component references in the JP2 image format decoder. A specially crafted JP2 image file could cause an application using the Jasper library to crash when opened.
5.5
Medium
CVE-2021-26927 2021-02-23 18h03 +00:00 A flaw was found in jasper before 2.0.25. A null pointer dereference in jp2_decode in jp2_dec.c may lead to program crash and denial of service.
5.5
Medium
CVE-2021-26926 2021-02-23 16h43 +00:00 A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2_decode function whic may lead to disclosure of information or program crash.
7.1
High
CVE-2020-27828 2020-12-11 02h07 +00:00 There's a flaw in jasper's jpc encoder in versions prior to 2.0.23. Crafted input provided to jasper by an attacker could cause an arbitrary out-of-bounds write. This could potentially affect data confidentiality, integrity, or application availability.
7.8
High
CVE-2017-14232 2019-08-15 14h24 +00:00 The read_chunk function in flif-dec.cpp in Free Lossless Image Format (FLIF) 0.3 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted flif file.
5.5
Medium
CVE-2016-9583 2018-08-01 15h00 +00:00 An out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper before 2.0.6 when processing crafted input.
7.8
High
CVE-2016-8654 2018-08-01 14h00 +00:00 A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small size. jasper versions before 2.0.0 are affected.
7.8
High
CVE-2016-9600 2018-03-12 15h00 +00:00 JasPer before version 2.0.10 is vulnerable to a null pointer dereference was found in the decoded creation of JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash.
6.5
Medium
CVE-2016-9591 2018-03-09 20h00 +00:00 JasPer before version 2.0.12 is vulnerable to a use-after-free in the way it decodes certain JPEG 2000 image files resulting in a crash on the application using JasPer.
5.5
Medium
CVE-2016-9391 2017-03-23 17h00 +00:00 The jpc_bitstream_getbits function in jpc_bs.c in JasPer before 2.0.10 allows remote attackers to cause a denial of service (assertion failure) via a very large integer.
7.5
High
CVE-2017-5505 2017-03-16 14h00 +00:00 The jas_matrix_asl function in jas_seq.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted image.
5.5
Medium
CVE-2017-6850 2017-03-15 13h00 +00:00 The jp2_cdef_destroy function in jp2_cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image.
5.5
Medium
CVE-2017-6851 2017-03-15 13h00 +00:00 The jas_matrix_bindsub function in jas_seq.c in JasPer 2.0.10 allows remote attackers to cause a denial of service (invalid read) via a crafted image.
5.5
Medium
CVE-2017-6852 2017-03-15 13h00 +00:00 Heap-based buffer overflow in the jpc_dec_decodepkt function in jpc_t2dec.c in JasPer 2.0.10 allows remote attackers to have unspecified impact via a crafted image.
7.8
High
CVE-2017-5503 2017-03-01 14h00 +00:00 The dec_clnpass function in libjasper/jpc/jpc_t1dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via a crafted image.
5.5
Medium
CVE-2016-8690 2017-02-15 18h00 +00:00 The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted BMP image in an imginfo command.
5.5
Medium
CVE-2016-9560 2017-02-15 18h00 +00:00 Stack-based buffer overflow in the jpc_tsfb_getbands2 function in jpc_tsfb.c in JasPer before 1.900.30 allows remote attackers to have unspecified impact via a crafted image.
7.8
High