| Max CVSS | 6.8 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2016-9398 | 5.0 |
The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.
|
22-02-2021 - 14:21 | 23-03-2017 - 18:59 | |
| CVE-2016-9399 | 5.0 |
The calcstepsizes function in jpc_dec.c in JasPer 1.900.22 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.
|
22-02-2021 - 14:18 | 23-03-2017 - 18:59 | |
| CVE-2017-14132 | 4.3 |
JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0
|
03-02-2021 - 04:15 | 04-09-2017 - 20:29 | |
| CVE-2018-9252 | 4.3 |
JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_abstorelstepsize in libjasper/jpc/jpc_enc.c.
|
25-09-2020 - 12:15 | 04-04-2018 - 02:29 | |
| CVE-2018-19139 | 4.3 |
An issue has been found in JasPer 2.0.14. There is a memory leak in jas_malloc.c when called from jpc_unk_getparms in jpc_cs.c.
|
25-09-2020 - 12:15 | 09-11-2018 - 21:29 | |
| CVE-2018-20622 | 4.3 |
JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when "--output-format jp2" is used.
|
25-09-2020 - 12:15 | 31-12-2018 - 19:29 | |
| CVE-2018-19543 | 6.8 |
An issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the function jp2_decode in libjasper/jp2/jp2_dec.c.
|
25-09-2020 - 12:15 | 26-11-2018 - 03:29 | |
| CVE-2018-18873 | 4.3 |
An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function ras_putdatastd in ras/ras_enc.c.
|
25-09-2020 - 12:15 | 31-10-2018 - 16:29 | |
| CVE-2018-20570 | 4.3 |
jp2_encode in jp2/jp2_enc.c in JasPer 2.0.14 has a heap-based buffer over-read.
|
25-09-2020 - 12:15 | 28-12-2018 - 16:29 | |
| CVE-2017-9782 | 4.3 |
JasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jp2_decode function in libjasper/jp2/jp2_dec.c.
|
25-09-2020 - 12:15 | 21-06-2017 - 20:29 | |
| CVE-2017-5505 | 4.3 |
The jas_matrix_asl function in jas_seq.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted image.
|
25-09-2020 - 12:15 | 16-03-2017 - 15:59 | |
| CVE-2017-5499 | 4.3 |
Integer overflow in libjasper/jpc/jpc_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted file.
|
25-09-2020 - 12:15 | 01-03-2017 - 15:59 | |
| CVE-2017-5504 | 4.3 |
The jpc_undo_roi function in libjasper/jpc/jpc_dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted image.
|
25-09-2020 - 12:15 | 01-03-2017 - 15:59 | |
| CVE-2017-5503 | 4.3 |
The dec_clnpass function in libjasper/jpc/jpc_t1dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via a crafted image.
|
25-09-2020 - 12:15 | 01-03-2017 - 15:59 | |
| CVE-2016-9399 | 5.0 |
The calcstepsizes function in jpc_dec.c in JasPer 1.900.22 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors. <a href="http://cwe.mitre.org/data/definitions/617.html">CWE-617: Reachable Assertion</a>
|
25-09-2020 - 12:15 | 23-03-2017 - 18:59 | |
| CVE-2016-9398 | 5.0 |
The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors. <a href="http://cwe.mitre.org/data/definitions/617.html">CWE-617: Reachable Assertion
|
25-09-2020 - 12:15 | 23-03-2017 - 18:59 | |
| CVE-2017-14132 | 4.3 |
JasPer 2.0.13 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jas_image_ishomosamp function in libjasper/base/jas_image.c.
|
25-09-2020 - 12:15 | 04-09-2017 - 20:29 | |
| CVE-2017-5503 | 4.3 |
The dec_clnpass function in libjasper/jpc/jpc_t1dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via a crafted image.
|
25-09-2020 - 12:15 | 01-03-2017 - 15:59 | |
| CVE-2018-19543 | 6.8 |
An issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the function jp2_decode in libjasper/jp2/jp2_dec.c.
|
25-09-2020 - 12:15 | 26-11-2018 - 03:29 | |
| CVE-2018-9252 | 4.3 |
JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_abstorelstepsize in libjasper/jpc/jpc_enc.c.
|
25-09-2020 - 12:15 | 04-04-2018 - 02:29 | |
| CVE-2017-9782 | 4.3 |
JasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jp2_decode function in libjasper/jp2/jp2_dec.c.
|
25-09-2020 - 12:15 | 21-06-2017 - 20:29 | |
| CVE-2017-5505 | 4.3 |
The jas_matrix_asl function in jas_seq.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted image.
|
25-09-2020 - 12:15 | 16-03-2017 - 15:59 | |
| CVE-2018-20622 | 4.3 |
JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when "--output-format jp2" is used.
|
25-09-2020 - 12:15 | 31-12-2018 - 19:29 | |
| CVE-2018-18873 | 4.3 |
An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function ras_putdatastd in ras/ras_enc.c.
|
25-09-2020 - 12:15 | 31-10-2018 - 16:29 | |
| CVE-2018-19139 | 4.3 |
An issue has been found in JasPer 2.0.14. There is a memory leak in jas_malloc.c when called from jpc_unk_getparms in jpc_cs.c.
|
25-09-2020 - 12:15 | 09-11-2018 - 21:29 | |
| CVE-2017-5504 | 4.3 |
The jpc_undo_roi function in libjasper/jpc/jpc_dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted image.
|
25-09-2020 - 12:15 | 01-03-2017 - 15:59 | |
| CVE-2017-5499 | 4.3 |
Integer overflow in libjasper/jpc/jpc_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted file.
|
25-09-2020 - 12:15 | 01-03-2017 - 15:59 | |
| CVE-2018-20570 | 4.3 |
jp2_encode in jp2/jp2_enc.c in JasPer 2.0.14 has a heap-based buffer over-read.
|
25-09-2020 - 12:15 | 28-12-2018 - 16:29 |