Medium severity5.5NVD Advisory· Published Jun 21, 2017· Updated May 13, 2026
CVE-2017-9782
CVE-2017-9782
Description
JasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jp2_decode function in libjasper/jp2/jp2_dec.c.
Affected products
1- cpe:2.3:a:jasper_project:jasper:2.0.12:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- github.com/mdadams/jasper/issues/140nvdIssue TrackingPatchThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.htmlnvd
- security.gentoo.org/glsa/201908-03nvd
News mentions
0No linked articles in our index yet.