CVE-2016-8884

概要

参考情報

• openwall.com/lists/oss-security/2016/10/23/1 · Mailing List
• openwall.com/lists/oss-security/2016/10/23/9 · Mailing List
• securityfocus.com/bid/93834 · Third Party Advisory
• access.redhat.com/errata/RHSA-2017:1208
• blogs.gentoo.org/ago/2016/10/18/jasper-two-null-pointer-dereference-in-bmp_getdata-bmp_dec-c-incomplete-fix-for-cve-2016-8690 · Patch
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• mdadams/jasper commit 5d66894 · Issue Tracking
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22FCKKHQCQ3S6TZY5G44EFDTMWOJXJRD
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EGI2FZQLOTSZI3VA4ECJERI74SMNQDL4

jasper のその他の脆弱性

• CVE-2025-8837高 7.8A vulnerability was identified in JasPer up to 4.2.5. This affects the function jpc_dec_dump of the file src/libjasper/jpc/jpc_dec.c of the …
• CVE-2025-8836低 3.3A vulnerability was determined in JasPer up to 4.2.5. Affected by this issue is the function jpc_floorlog2 of the file src/libjasper/jpc/jpc…
• CVE-2025-8835中 5.5A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jas_image_chclrspc of the file src/libjasper…
• CVE-2023-51257高 7.8An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code.
• CVE-2022-2963高 7.5A vulnerability found in jasper. This security vulnerability happens because of a memory leak bug in function cmdopts_parse that can cause a…