CVE-2016-8887

概要

参考情報

• openwall.com/lists/oss-security/2016/10/23/3 · Mailing List
• openwall.com/lists/oss-security/2016/10/23/6 · Mailing List
• securityfocus.com/bid/93835 · Third Party Advisory
• blogs.gentoo.org/ago/2016/10/18/jasper-null-pointer-dereference-in-jp2_colr_destroy-jp2_cod-c · Third Party Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• mdadams/jasper commit e24bdc7 · Issue Tracking
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22FCKKHQCQ3S6TZY5G44EFDTMWOJXJRD
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EGI2FZQLOTSZI3VA4ECJERI74SMNQDL4
• usn.ubuntu.com/3693-1

jasper のその他の脆弱性

• CVE-2025-8837高 7.8A vulnerability was identified in JasPer up to 4.2.5. This affects the function jpc_dec_dump of the file src/libjasper/jpc/jpc_dec.c of the …
• CVE-2025-8836低 3.3A vulnerability was determined in JasPer up to 4.2.5. Affected by this issue is the function jpc_floorlog2 of the file src/libjasper/jpc/jpc…
• CVE-2025-8835中 5.5A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jas_image_chclrspc of the file src/libjasper…
• CVE-2023-51257高 7.8An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code.
• CVE-2022-2963高 7.5A vulnerability found in jasper. This security vulnerability happens because of a memory leak bug in function cmdopts_parse that can cause a…