Buffer overflow in Jasper Project

CVE-2014-8158

Multiple stack-based buffer overflows in jpc_qmfb.c in JasPer 1.900.1 and earlier allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 image.

Vulnerability class: Buffer Overflow

EPSS: 0.144 (96.3th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References