High severity7.5NVD Advisory· Published Mar 15, 2017· Updated Jun 17, 2026

CVE-2016-10248

Description

The jpc_tsfb_synthesize function in jpc_tsfb.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer dereference) via vectors involving an empty sequence.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Jasper Project/Jasper
cpe:2.3:a:jasper_project:jasper:*:*:*:*:*:*:*:*
Range: <=1.900.8
Jasper/JasPerllm-fuzzy
Range: <1.900.9

Patches

Vulnerability mechanics

References

github.com/mdadams/jasper/commit/2e82fa00466ae525339754bb3ab0a0474a31d4bdnvdPatchThird Party Advisory
blogs.gentoo.org/ago/2016/10/20/jasper-null-pointer-dereference-in-jpc_tsfb_synthesize-jpc_tsfb-c/nvdExploitIssue TrackingPatchThird Party AdvisoryVDB Entry
www.securityfocus.com/bid/93797nvd
access.redhat.com/errata/RHSA-2017:1208nvd
usn.ubuntu.com/3693-1/nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.003
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000