Skip to content
OpenAdvisories
Unscored DSA-3827-1 3 CVEs

jasper - security update

Published Apr 7, 2017 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 8 jasper 1.900.1-debian1-2.4+deb8u3

Vulnerabilities 3

  • Unscored —

    Integer overflow in the jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.12 allows remote attackers to h…

  • Unscored —

    Integer overflow in the jpc_pi_nextcprl function in jpc_t2cod.c in JasPer before 1.900.20 allows remote attackers to ha…

  • Unscored —

    JasPer before version 2.0.12 is vulnerable to a use-after-free in the way it decodes certain JPEG 2000 image files resu…