https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:34:57.842940+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-03261 cnvd-2017-03261 2026-10-03T14:34:57.943755+00:00 cnvd-2017-03261 https://cve.radiocsirt.org/vuln/euvd-2026-88407 EUVD-2026-88407 2026-10-03T14:34:57.943804+00:00 EUVD-2026-88407 https://cve.radiocsirt.org/vuln/fkie_cve-2016-10248 fkie_cve-2016-10248 2026-10-03T14:34:57.943828+00:00

The jpc_tsfb_synthesize function in jpc_tsfb.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer dereference) via vectors involving an empty sequence.

 https://cve.radiocsirt.org/vuln/ghsa-fwrx-6246-jgv9 GHSA-fwrx-6246-jgv9 2026-10-03T14:34:57.943871+00:00

The jpc_tsfb_synthesize function in jpc_tsfb.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer dereference) via vectors involving an empty sequence.

 https://cve.radiocsirt.org/vuln/gsd-2016-10248 gsd-2016-10248 2026-10-03T14:34:57.943896+00:00 gsd-2016-10248 https://cve.radiocsirt.org/vuln/rhsa-2017:1208 RHSA-2017:1208 — Red Hat Security Advisory: jasper security update 2026-10-03T14:34:57.943918+00:00

jasper: integer overflow in jas_image_cmpt_create() jasper: use-after-free and double-free flaws in mif_process_cmpt() jasper: double free issue in jas_iccattrval_destroy() jasper: out-of-bounds read in jpc_pi_nextcprl() jasper: matrix rows_ NULL pointer dereference in jas_matrix_clip() jasper: memory leak in jas_iccprof_createfrombuf() jasper: heap-based buffer overflow in QMFB code in JPC codec jasper: missing jas_matrix_create() parameter checks jasper: missing SIZ marker segment XRsiz and YRsiz fields range check jasper: missing SIZ marker segment XRsiz and YRsiz fields range check jasper: incorrect handling of bufsize 0 in mem_resize() jasper: reachable asserts in jpc_dec_tiledecode() jasper: missing jas_matrix_create() parameter checks jasper: missing jas_matrix_create() parameter checks jasper: integer truncation in jas_image_cmpt_create() jasper: integer overflow in jpc_dec_process_siz() jasper: reachable assertions in RAS encoder/decoder jasper: reachable assertions caused by insufficient component domains checks in ICT/RCT in JPC codec jasper: insufficient SIZ marker tilexoff and tileyoff checks jasper: reachable assertions in the JPC bitstream code jasper: insufficient SIZ marker segment data sanity checks jasper: insufficient SIZ marker segment data sanity checks jasper: insufficient SIZ marker segment data sanity checks jasper: stack-based buffer overflow in jpc_dec_tileinit() jasper: integer overflows leading to out of bounds read in packet iterators in JPC dec…

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-10248 UBUNTU-CVE-2016-10248 2026-10-03T14:34:57.944048+00:00

Affected: Ubuntu:14.04:LTS: jasper, Ubuntu:16.04:LTS: jasper

The jpc_tsfb_synthesize function in jpc_tsfb.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer dereference) via vectors involving an empty sequence.