JasPer before version 2.0.10 is vulnerable to a null pointer dereference was found in the decoded creation of JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9600
Reference (s):
- https://bugzilla.redhat.com/show_bug.cgi?id=1410026
- REDHAT:RHSA-2017:1208
- URL: https://access.redhat.com/errata/RHSA-2017:1208
- UBUNTU:USN-3693-1
- URL: https://usn.ubuntu.com/3693-1/