An out-of-bounds heap read vulnerability was found in the jpcpinextpcrl() function of jasper before 2.0.6 when processing crafted input.
[
{
"deprecated": false,
"source": "https://github.com/jasper-software/jasper/commit/aa0b0f79ade5eef8b0e7a214c03f5af54b36ba7d",
"id": "CVE-2016-9583-1d0fdefb",
"digest": {
"function_hash": "229357773841787597542836706636688272757",
"length": 2891.0
},
"target": {
"function": "jpc_pi_nextpcrl",
"file": "src/libjasper/jpc/jpc_t2cod.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://github.com/jasper-software/jasper/commit/aa0b0f79ade5eef8b0e7a214c03f5af54b36ba7d",
"id": "CVE-2016-9583-1d59b3e3",
"digest": {
"function_hash": "101649940697566588668569505502566673292",
"length": 3126.0
},
"target": {
"function": "jpc_pi_nextcprl",
"file": "src/libjasper/jpc/jpc_t2cod.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://github.com/jasper-software/jasper/commit/aa0b0f79ade5eef8b0e7a214c03f5af54b36ba7d",
"id": "CVE-2016-9583-3f3eee64",
"digest": {
"threshold": 0.9,
"line_hashes": [
"76046811373635138994273651784537904216",
"77170917514984923131795498582393752865",
"218161562009849185040788517163987921882",
"71004272932463797870134322351281497816",
"2226618095858842688844805833123569353",
"20291483828154380566995138842762868800",
"10569523255311290312790915988156150105",
"36539532521627043475591919756337940217",
"127118164596308144680491117010486093521",
"319190536247087752243160103132479944052",
"249477897257943548225768957271196638257",
"240097045700587730028063697544631200674",
"244979800254135918839574329475967313372",
"185322458923865332444729054102095226030",
"35258226244143295136488049194658767484",
"31650396589587437552966618962124651297",
"233474337354533259542487654900534703574",
"223131863458772104468468724845052956874",
"224822972969045047794733867040604615592",
"193041954980164523961774389856040052756",
"28358825345365660111249483282297598019",
"26069384087220063771981873251622785268",
"119796533562898460557783589838608270844",
"158332060735659374925163957932980341898",
"234620628400447244415669446557076230338",
"65243341767006019528165532080531137393",
"237406085935926331877091195284126393137",
"325115742102582045224743750880358018022",
"30693029952555506351869170735981832284",
"58822322899139123254992036560551534001",
"247365377581573090869863068759153090052",
"115969653954998056091658806414211171780",
"296448336514631402773126469151012576930",
"129135795651286035458667479568250698108",
"189769777837324779334608856476710820148",
"193867499551659243752650703651699372642",
"331678878903697085981695740848787946950",
"286442901174166503706304758001230656881",
"126368918117204250507362348099073811657",
"43450351916781748864600115559105676038",
"84808611277771588067162670076834869781",
"232923153825435402764618930105086921183",
"297131946601869719730078737913898172633",
"297893218366117645114969153424858743297",
"116076871864862106294029972021273834301",
"19521899503408518769724411958978352234",
"218285233182378092268023131151074716021",
"215605693293663989771846549740939172186",
"224822972969045047794733867040604615592",
"193041954980164523961774389856040052756",
"28358825345365660111249483282297598019",
"26069384087220063771981873251622785268",
"119796533562898460557783589838608270844",
"120891072019545283083375320112444031331",
"234620628400447244415669446557076230338",
"65243341767006019528165532080531137393",
"237406085935926331877091195284126393137",
"58258389114354096853325218832132923895",
"172203641125065899100986598817763413275",
"267610441893230968186412596064076798555",
"188040126486216934775320176351790718958",
"44849565462525075366761066144258810849",
"205602058246656309900046845815445942166",
"323041948791230186137053327575542925283",
"83029025615946028708375845178554425021",
"232923153825435402764618930105086921183",
"297131946601869719730078737913898172633",
"297893218366117645114969153424858743297",
"116076871864862106294029972021273834301",
"19521899503408518769724411958978352234",
"218285233182378092268023131151074716021",
"215605693293663989771846549740939172186",
"224822972969045047794733867040604615592",
"193041954980164523961774389856040052756",
"28358825345365660111249483282297598019",
"266142114665985186365689501811108052109",
"180045520544452117551367598977509781011",
"206958073917133144534949243776140577917",
"214895281256448126239968921802016256430",
"114901085653473573016545794389187582341",
"151635545287270114368360681630776092647",
"274333162242857247856831134286475613054",
"109700637302186618279353669707542644313",
"237406085935926331877091195284126393137",
"325115742102582045224743750880358018022"
]
},
"target": {
"file": "src/libjasper/jpc/jpc_t2cod.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://github.com/jasper-software/jasper/commit/f25486c3d4aa472fec79150f2c41ed4333395d3d",
"id": "CVE-2016-9583-d9163f21",
"digest": {
"function_hash": "175828168267191850202896252645788233293",
"length": 3195.0
},
"target": {
"function": "jpc_pi_nextrpcl",
"file": "src/libjasper/jpc/jpc_t2cod.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://github.com/jasper-software/jasper/commit/aa0b0f79ade5eef8b0e7a214c03f5af54b36ba7d",
"id": "CVE-2016-9583-ede47ba8",
"digest": {
"function_hash": "261215937801547403553902024992116877422",
"length": 2889.0
},
"target": {
"function": "jpc_pi_nextrpcl",
"file": "src/libjasper/jpc/jpc_t2cod.c"
},
"signature_type": "Function",
"signature_version": "v1"
}
]