https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:18:24.120264+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-103586 EUVD-2026-103586 2026-10-03T12:18:24.237407+00:00 EUVD-2026-103586 https://cve.radiocsirt.org/vuln/fkie_cve-2014-9029 fkie_cve-2014-9029 2026-10-03T12:18:24.237451+00:00

Multiple off-by-one errors in the (1) jpc_dec_cp_setfromcox and (2) jpc_dec_cp_setfromrgn functions in jpc/jpc_dec.c in JasPer 1.900.1 and earlier allow remote attackers to execute arbitrary code via a crafted jp2 file, which triggers a heap-based buffer overflow.

 https://cve.radiocsirt.org/vuln/ghsa-w26c-gw69-r33c GHSA-w26c-gw69-r33c 2026-10-03T12:18:24.237488+00:00

Multiple off-by-one errors in the (1) jpc_dec_cp_setfromcox and (2) jpc_dec_cp_setfromrgn functions in jpc/jpc_dec.c in JasPer 1.900.1 and earlier allow remote attackers to execute arbitrary code via a crafted jp2 file, which triggers a heap-based buffer overflow.

 https://cve.radiocsirt.org/vuln/gsd-2014-9029 gsd-2014-9029 2026-10-03T12:18:24.237505+00:00 gsd-2014-9029 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10281-1 openSUSE-SU-2024:10281-1 — jasper-1.900.14-3.1 on GA media 2026-10-03T12:18:24.237517+00:00

jasper-1.900.14-3.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2015:0698 RHSA-2015:0698 — Red Hat Security Advisory: rhevm-spice-client security, bug fix, and enhancement update 2026-10-03T12:18:24.237553+00:00

jasper: multiple integer overflows in jas_alloc calls jasper: possible buffer overflow in jas_stream_printf() jasper: heap buffer overflow flaws lead to arbitrary code execution (CERT VU#887409) jasper: heap buffer overflow flaws lead to arbitrary code execution (CERT VU#887409) jasper: double-free in in jas_iccattrval_destroy() (oCERT-2014-012) jasper: heap overflow in jp2_decode() (oCERT-2014-012) jasper: dec->numtiles off-by-one check in jpc_dec_process_sot() (oCERT-2015-001) jasper: unrestricted stack memory use in jpc_qmfb.c (oCERT-2015-001) jasper: incorrect component number check in COC, RGN and QCC marker segment decoders (oCERT-2014-009)

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-9029 UBUNTU-CVE-2014-9029 2026-10-03T12:18:24.237585+00:00

Affected: Ubuntu:14.04:LTS: jasper

Multiple off-by-one errors in the (1) jpc_dec_cp_setfromcox and (2) jpc_dec_cp_setfromrgn functions in jpc/jpc_dec.c in JasPer 1.900.1 and earlier allow remote attackers to execute arbitrary code via a crafted jp2 file, which triggers a heap-based buffer overflow.