Skip to content
OpenAdvisories
Unscored USN-2919-1 2 CVEs

jasper vulnerabilities

Published Mar 3, 2016 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Jacob Baines discovered that JasPer incorrectly handled ICC color profiles
in JPEG-2000 image files. If a user were tricked into opening a specially
crafted JPEG-2000 image file, a remote attacker could cause JasPer to
crash or possibly execute arbitrary code with user privileges.
(CVE-2016-1577)

Tyler Hicks discovered that JasPer incorrectly handled memory when
processing JPEG-2000 image files. If a user were tricked into opening a
specially crafted JPEG-2000 image file, a remote attacker could cause
JasPer to consume memory, resulting in a denial of service.
(CVE-2016-2116)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS jasper 1.900.1-14ubuntu3.3

Vulnerabilities 2

  • Unscored —
    CVE-2016-1577

    Double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers …

    jasper Ubuntu
  • Unscored —
    CVE-2016-2116

    Memory leak in the jas_iccprof_createfrombuf function in JasPer 1.900.1 and earlier allows remote attackers to cause a …

    jasper Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2016-1577
  • report
    https://ubuntu.com/security/CVE-2016-2116