CVE-2016-10250

The jp2_colr_destroy function in jp2_cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service (NULL pointer dereference) by…

published March 15, 2017

CVSS
—
EPSS
4%
Percentile
90.4
In the wild
Unconfirmed
What it is

The jp2_colr_destroy function in jp2_cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service (NULL pointer dereference) by leveraging incorrect cleanup of JP2 box data on error. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8887.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03979 · 90.4th percentile
Published
2017-03-15T14:00Z
EPSS history
Timeline
  • 15 MAR 14:00Z
    The jp2_colr_destroy function in jp2_cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service (NULL pointer dereference) by…
    cvelistv5