https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:56:58.397276+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-03801 cnvd-2017-03801 2026-10-03T01:56:58.496637+00:00 cnvd-2017-03801 https://cve.radiocsirt.org/vuln/euvd-2026-88420 EUVD-2026-88420 2026-10-03T01:56:58.496681+00:00 EUVD-2026-88420 https://cve.radiocsirt.org/vuln/fkie_cve-2016-10249 fkie_cve-2016-10249 2026-10-03T01:56:58.496697+00:00

Integer overflow in the jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.12 allows remote attackers to have unspecified impact via a crafted image file, which triggers a heap-based buffer overflow.

 https://cve.radiocsirt.org/vuln/ghsa-w7m7-2vcc-wx3m GHSA-w7m7-2vcc-wx3m 2026-10-03T01:56:58.496730+00:00

Integer overflow in the jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.12 allows remote attackers to have unspecified impact via a crafted image file, which triggers a heap-based buffer overflow.

 https://cve.radiocsirt.org/vuln/gsd-2016-10249 gsd-2016-10249 2026-10-03T01:56:58.496747+00:00 gsd-2016-10249 https://cve.radiocsirt.org/vuln/rhsa-2017:1208 RHSA-2017:1208 — Red Hat Security Advisory: jasper security update 2026-10-03T01:56:58.496758+00:00

jasper: integer overflow in jas_image_cmpt_create() jasper: use-after-free and double-free flaws in mif_process_cmpt() jasper: double free issue in jas_iccattrval_destroy() jasper: out-of-bounds read in jpc_pi_nextcprl() jasper: matrix rows_ NULL pointer dereference in jas_matrix_clip() jasper: memory leak in jas_iccprof_createfrombuf() jasper: heap-based buffer overflow in QMFB code in JPC codec jasper: missing jas_matrix_create() parameter checks jasper: missing SIZ marker segment XRsiz and YRsiz fields range check jasper: missing SIZ marker segment XRsiz and YRsiz fields range check jasper: incorrect handling of bufsize 0 in mem_resize() jasper: reachable asserts in jpc_dec_tiledecode() jasper: missing jas_matrix_create() parameter checks jasper: missing jas_matrix_create() parameter checks jasper: integer truncation in jas_image_cmpt_create() jasper: integer overflow in jpc_dec_process_siz() jasper: reachable assertions in RAS encoder/decoder jasper: reachable assertions caused by insufficient component domains checks in ICT/RCT in JPC codec jasper: insufficient SIZ marker tilexoff and tileyoff checks jasper: reachable assertions in the JPC bitstream code jasper: insufficient SIZ marker segment data sanity checks jasper: insufficient SIZ marker segment data sanity checks jasper: insufficient SIZ marker segment data sanity checks jasper: stack-based buffer overflow in jpc_dec_tileinit() jasper: integer overflows leading to out of bounds read in packet iterators in JPC dec…

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-10249 UBUNTU-CVE-2016-10249 2026-10-03T01:56:58.496830+00:00

Affected: Ubuntu:14.04:LTS: jasper, Ubuntu:16.04:LTS: jasper

Integer overflow in the jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.12 allows remote attackers to have unspecified impact via a crafted image file, which triggers a heap-based buffer overflow.