Skip to content
OpenAdvisories
Unscored DLA-920-1 2 CVEs

jasper - security update

Published Apr 26, 2017 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 7 jasper 1.900.1-13+deb7u6

Vulnerabilities 2

  • Unscored —

    Integer overflow in the jpc_pi_nextcprl function in jpc_t2cod.c in JasPer before 1.900.20 allows remote attackers to ha…

  • Unscored —

    JasPer before version 2.0.12 is vulnerable to a use-after-free in the way it decodes certain JPEG 2000 image files resu…