CVE-2016-8693

Double free vulnerability in the mem_close function in jas_stream.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (crash) or…

published February 15, 2017

CVSS
—
EPSS
3%
Percentile
88.4
In the wild
Unconfirmed
What it is

Double free vulnerability in the mem_close function in jas_stream.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image to the imginfo command.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03320 · 88.4th percentile
Published
2017-02-15T19:00Z
EPSS history
Timeline
  • 15 FEB 19:00Z
    Double free vulnerability in the mem_close function in jas_stream.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (crash) or…
    cvelistv5