https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 12:18:31 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-103586 EUVD-2026-103586 https://cve.radiocsirt.org/vuln/euvd-2026-103586 https://cve.radiocsirt.org/vuln/fkie_cve-2014-9029 <p>Multiple off-by-one errors in the (1) jpc_dec_cp_setfromcox and (2) jpc_dec_cp_setfromrgn functions in jpc/jpc_dec.c in JasPer 1.900.1 and earlier allow remote attackers to execute arbitrary code via a crafted jp2 file, which triggers a heap-based buffer overflow.</p> <p>Multiple off-by-one errors in the (1) jpc_dec_cp_setfromcox and (2) jpc_dec_cp_setfromrgn functions in jpc/jpc_dec.c in JasPer 1.900.1 and earlier allow remote attackers to execute arbitrary code via a crafted jp2 file, which triggers a heap-based buffer overflow.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-9029 https://cve.radiocsirt.org/vuln/ghsa-w26c-gw69-r33c <p>Multiple off-by-one errors in the (1) jpc_dec_cp_setfromcox and (2) jpc_dec_cp_setfromrgn functions in jpc/jpc_dec.c in JasPer 1.900.1 and earlier allow remote attackers to execute arbitrary code via a crafted jp2 file, which triggers a heap-based buffer overflow.</p> <p>Multiple off-by-one errors in the (1) jpc_dec_cp_setfromcox and (2) jpc_dec_cp_setfromrgn functions in jpc/jpc_dec.c in JasPer 1.900.1 and earlier allow remote attackers to execute arbitrary code via a crafted jp2 file, which triggers a heap-based buffer overflow.</p> https://cve.radiocsirt.org/vuln/ghsa-w26c-gw69-r33c https://cve.radiocsirt.org/vuln/gsd-2014-9029 gsd-2014-9029 https://cve.radiocsirt.org/vuln/gsd-2014-9029 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10281-1 <p>jasper-1.900.14-3.1 on GA media</p> <p>jasper-1.900.14-3.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10281-1 https://cve.radiocsirt.org/vuln/rhsa-2015:0698 <p>jasper: multiple integer overflows in jas_alloc calls jasper: possible buffer overflow in jas_stream_printf() jasper: heap buffer overflow flaws lead to arbitrary code execution (CERT VU#887409) jasper: heap buffer overflow flaws lead to arbitrary code execution (CERT VU#887409) jasper: double-free in in jas_iccattrval_destroy() (oCERT-2014-012) jasper: heap overflow in jp2_decode() (oCERT-2014-012) jasper: dec-&gt;numtiles off-by-one check in jpc_dec_process_sot() (oCERT-2015-001) jasper: unrestricted stack memory use in jpc_qmfb.c (oCERT-2015-001) jasper: incorrect component number check in COC, RGN and QCC marker segment decoders (oCERT-2014-009)</p> <p>jasper: multiple integer overflows in jas_alloc calls jasper: possible buffer overflow in jas_stream_printf() jasper: heap buffer overflow flaws lead to arbitrary code execution (CERT VU#887409) jasper: heap buffer overflow flaws lead to arbitrary code execution (CERT VU#887409) jasper: double-free in in jas_iccattrval_destroy() (oCERT-2014-012) jasper: heap overflow in jp2_decode() (oCERT-2014-012) jasper: dec-&gt;numtiles off-by-one check in jpc_dec_process_sot() (oCERT-2015-001) jasper: unrestricted stack memory use in jpc_qmfb.c (oCERT-2015-001) jasper: incorrect component number check in COC, RGN and QCC marker segment decoders (oCERT-2014-009)</p> https://cve.radiocsirt.org/vuln/rhsa-2015:0698 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-9029 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: jasper</p> <p>Multiple off-by-one errors in the (1) jpc_dec_cp_setfromcox and (2) jpc_dec_cp_setfromrgn functions in jpc/jpc_dec.c in JasPer 1.900.1 and earlier allow remote attackers to execute arbitrary code via a crafted jp2 file, which triggers a heap-based buffer overflow.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: jasper</p> <p>Multiple off-by-one errors in the (1) jpc_dec_cp_setfromcox and (2) jpc_dec_cp_setfromrgn functions in jpc/jpc_dec.c in JasPer 1.900.1 and earlier allow remote attackers to execute arbitrary code via a crafted jp2 file, which triggers a heap-based buffer overflow.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-9029