CVE-2016-2089: Jasper Project Jasper
Medium severity, CVSS 6.5. EPSS: 3% chance of exploitation in the next 30 days.
The jas_matrix_clip function in jas_seq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted JPEG 2000 image.
Affected products
- Jasper Project Jasper: version 1.900.1 only
Published 2016-02-08. Last modified 2026-06-17.