CVE-2016-9262
Published: 23 March 2017
Multiple integer overflows in the (1) jas_realloc function in base/jas_malloc.c and (2) mem_resize function in base/jas_stream.c in JasPer before 1.900.22 allow remote attackers to cause a denial of service via a crafted image, which triggers use after free vulnerabilities.
Priority
CVSS 3 base score: 5.5
Notes
Author | Note |
---|---|
mdeslaur | introduced in 1.900.18 |
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9262
- https://blogs.gentoo.org/ago/2016/11/07/jasper-use-after-free-in-jas_realloc-jas_malloc-c
- NVD
- Launchpad
- Debian