CVE-2016-9583CWE-125CWE-190

An out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper before 2.0.6 when processing crafted input

Medium · published August 1, 2018

CVSS v3.0
5.5
EPSS
2%
Percentile
79.3
In the wild
Unconfirmed
What it is

An out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper before 2.0.6 when processing crafted input.

The record
Technical detail
CVSS v3.0
5.5 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01889 · 79.3th percentile
Weaknesses
CWE-125 · Out-of-bounds Read; CWE-190 · Integer Overflow or Wraparound
Published
2018-08-01T17:00Z
EPSS history
Timeline
  • 01 AUG 17:00Z
    An out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper before 2.0.6 when processing crafted input
    cvelistv5