CVE-2016-9591

Description

JasPer before version 2.0.12 is vulnerable to a use-after-free in the way it decodes certain JPEG 2000 image files resulting in a crash on the application using JasPer.

Affected products

• JasPer Project / jasper2.0.12 – 2.0.12

References

• MISChttps://bugzilla.redhat.com/show_bug.cgi?id=1406405
• VENDOR_ADVISORYhttps://www.debian.org/security/2017/dsa-3827
• MISChttps://security.gentoo.org/glsa/201707-07
• VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2017:1208
• MISChttp://www.securityfocus.com/bid/94952