CVE-2016-9591

Published: 3/9/2018 Last updated: 9/17/2024 Reserved: 11/23/2016

JasPer before version 2.0.12 is vulnerable to a use-after-free in the way it decodes certain JPEG 2000 image files resulting in a crash on the application using JasPer.

CNA assigner: redhat (53f830b8-0a3f-465b-8143-3b8a9948e749) Requested by: n/a

Opam packages affected (1)

grib

Products affected (1)

Product	Vendor	Version
jasper	JasPer Project	Android10/Android11/Android12

References (10)

https://bugzilla.redhat.com/show_bug.cgi?id=1406405
https://www.debian.org/security/2017/dsa-3827
https://security.gentoo.org/glsa/201707-07
https://access.redhat.com/errata/RHSA-2017:1208
http://www.securityfocus.com/bid/94952
https://bugzilla.redhat.com/show_bug.cgi?id=1406405
https://www.debian.org/security/2017/dsa-3827
https://security.gentoo.org/glsa/201707-07
https://access.redhat.com/errata/RHSA-2017:1208
http://www.securityfocus.com/bid/94952