High severity7.6NVD Advisory· Published Apr 13, 2016· Updated Jun 17, 2026

CVE-2016-1577

Description

Double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file, a different vulnerability than CVE-2014-8137.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Jasper Project/Jasper
cpe:2.3:a:jasper_project:jasper:*:*:*:*:*:*:*:*
Range: <=1.900.1
Canonical/Ubuntu Linux3 versions
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*+ 2 more
- cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
Jasper/JasPerllm-fuzzy
Range: <=1.900.1
osv-coords13 versions
pkg:rpm/opensuse/jasper&distro=openSUSE%20Tumbleweed pkg:rpm/suse/jasper&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1 pkg:rpm/suse/jasper&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2 pkg:rpm/suse/jasper&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/jasper&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1 pkg:rpm/suse/jasper&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2 pkg:rpm/suse/jasper&distro=SUSE%20Linux%20Enterprise%20Server%20for%20Raspberry%20Pi%2012%20SP2 pkg:rpm/suse/jasper&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/jasper&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/jasper&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2 pkg:rpm/suse/jasper&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4 pkg:rpm/suse/jasper&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP1 pkg:rpm/suse/jasper&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP2
< 1.900.14-3.1+ 12 more
- (no CPE)range: < 1.900.14-3.1
- (no CPE)range: < 1.900.14-181.1
- (no CPE)range: < 1.900.14-181.1
- (no CPE)range: < 1.900.14-134.25.1
- (no CPE)range: < 1.900.14-181.1
- (no CPE)range: < 1.900.14-181.1
- (no CPE)range: < 1.900.14-181.1
- (no CPE)range: < 1.900.14-134.25.1
- (no CPE)range: < 1.900.14-181.1
- (no CPE)range: < 1.900.14-181.1
- (no CPE)range: < 1.900.14-134.25.1
- (no CPE)range: < 1.900.14-181.1
- (no CPE)range: < 1.900.14-181.1

cvss	0.494
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2016-1577

Description

AI Insight

Affected products

Patches

Vulnerability mechanics

References

News mentions