The jp2_colr_destroy function in jp2_cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service (NULL pointer dereference) by leveraging incorrect cleanup of JP2 box data on error. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8887.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Huawei Euleros 2_0_sp3 | — | Upgrade jasper-libs | Apr 16, 2020 | Mar 15, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade jasper-libs | Nov 19, 2019 | Mar 15, 2017 |
| Ubuntu | — | Upgrade libjasper1 | Jul 3, 2018 | Mar 15, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub