CVE-2016-1867: Jasper Project Jasper

Medium severity, CVSS 6.5. EPSS: 2.3% chance of exploitation in the next 30 days.

The jpc_pi_nextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG 2000 image.

Affected products

Published 2016-01-20. Last modified 2026-06-17.