CVE-2016-10250 PUBLISHED

The jp2_colr_destroy function in jp2_cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service (NULL pointer dereference) by leveraging incorrect cleanup of JP2 box data on error. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8887.

EPSS 0.67% · 71.2th percentile

Risk Scores

EPSS Score
0.67%
71.2th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSjasper0, 1.900.1-debian1-2.4, 1.900.1-debian1-2.4ubuntu1
Ubuntu:14.04:LTSjasper1.900.1-14ubuntu3.2, 0, 1.900.1-14ubuntu3.4

Timeline

References

Open in Interactive Console →