CVE-2016-8886
The jas_malloc function in libjasper/base/jas_malloc.c in JasPer before 1.900.11 allows remote...
The jas_malloc function in libjasper/base/jas_malloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted file, which triggers a memory allocation failure.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
The jas_malloc function in libjasper/base/jas_malloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted file, which triggers a memory allocation failure.
- Record
CVE-2016-8886- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
The jas_malloc function in libjasper/base/jas_malloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted file, which triggers a memory allocation failure.
- Record
CVE-2016-8886- Updated
- 2026-11-02
EUVDEUVD-2016-9711 No score
The jas_malloc function in libjasper/base/jas_malloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted file, which triggers a memory allocation failure.
- Record
EUVD-2016-9711- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9xmw-vfxq-m8h5
The jas_malloc function in libjasper/base/jas_malloc.c in JasPer before 1.900.11 allows remote...
The jas_malloc function in libjasper/base/jas_malloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted file, which triggers a memory allocation failure.
- Record
GHSA-9xmw-vfxq-m8h5- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-119
- Updated
- 2026-11-02
OSV
The jas_malloc function in libjasper/base/jas_malloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted file, which triggers a memory allocation failure.
- Record
CVE-2016-8886- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2016-8886
The jas_malloc function in libjasper/base/jas_malloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted file, which triggers a memory allocation failure.
- Record
UBUNTU-CVE-2016-8886- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 4 moreShow less
OSVMGASA-2017-0474 No score
Updated jasper packages fix security vulnerabilities
The jasper package has been updated and patched to fix several security issues.
- Record
MGASA-2017-0474- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10281-1 No score
jasper-1.900.14-3.1 on GA media
These are all security issues fixed in the jasper-1.900.14-3.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10281-1- Updated
- 2026-11-02
OSVSUSE-SU-2016:2775-1 No score
Security update for jasper
This update for jasper to version 1.900.14 fixes several issues.
These security issues were fixed:
- CVE-2016-8887: NULL pointer dereference in jp2_colr_destroy (jp2_cod.c) (bsc#1006836)
- CVE-2016-8886: memory allocation failure in jas_malloc (jas_malloc.c) (bsc#1006599)
- CVE-2016-8884,CVE-2016-8885: two null pointer dereferences in bmp_getdata (incomplete fix for CVE-2016-8690) (bsc#1007009)
- CVE-2016-8883: assert in jpc_dec_tiledecode() (bsc#1006598)
- CVE-2016-8882: segfault / null pointer access in jpc_pi_destroy (bsc#1006597)
- CVE-2016-8881: Heap overflow in jpc_getuint16() (bsc#1006593)
- CVE-2016-8880: Heap overflow in jpc_dec_cp_setfromcox() (bsc#1006591)
- CVE-2016-8693 Double free vulnerability in mem_close (bsc#1005242)
- CVE-2016-8691, CVE-2016-8692: Divide by zero in jpc_dec_process_siz (bsc#1005090)
- CVE-2016-8690: Null pointer dereference in bmp_getdata triggered by crafted BMP image (bsc#1005084)
- CVE-2016-2116: Memory leak in the jas_iccprof_createfrombuf function in JasPer allowed remote attackers to cause a denial of service (memory consumption) via a crafted ICC color profile in a JPEG 2000 image file (bsc#968373)
- CVE-2016-2089: invalid read in the JasPer's jas_matrix_clip() function (bsc#963983)
- CVE-2016-1867: Out-of-bounds Read in the JasPer's jpc_pi_nextcprl() function (bsc#961886)
- CVE-2015-5221: Use-after-free (and double-free) in Jasper JPEG-200 (bsc#942553).
- CVE-2015-5203: Double free corruption in JasPer JPEG-2000 implementation (bsc#941919)
- CVE-2008-3522: Buffer overflow in the jas_stream_printf function in libjasper/base/jas_stream.c in JasPer might have allowed context-dependent attackers to have an unknown impact via vectors related to the mif_hdr_put function and use of vsprintf (bsc#392410)
- jasper: NULL pointer dereference in jp2_colr_destroy (jp2_cod.c) (incomplete fix for CVE-2016-8887) (bsc#1006839)
For additional change description please have a look at the changelog.
- Record
SUSE-SU-2016:2775-1- Updated
- 2026-11-02
OSVSUSE-SU-2016:2776-1 No score
Security update for jasper
This update for jasper fixes the following issues:
Security fixes:
- CVE-2016-8887: NULL pointer dereference in jp2_colr_destroy (jp2_cod.c) (bsc#1006836)
- CVE-2016-8886: memory allocation failure in jas_malloc (jas_malloc.c) (bsc#1006599)
- CVE-2016-8884,CVE-2016-8885: two null pointer dereferences in bmp_getdata (incomplete fix for CVE-2016-8690) (bsc#1007009)
- CVE-2016-8883: assert in jpc_dec_tiledecode() (bsc#1006598)
- CVE-2016-8882: segfault / null pointer access in jpc_pi_destroy (bsc#1006597)
- CVE-2016-8881: Heap overflow in jpc_getuint16() (bsc#1006593)
- CVE-2016-8880: Heap overflow in jpc_dec_cp_setfromcox() (bsc#1006591)
- CVE-2016-8693: Double free vulnerability in mem_close (bsc#1005242)
- CVE-2016-8691, CVE-2016-8692: Divide by zero in jpc_dec_process_siz (bsc#1005090)
- CVE-2016-8690: Null pointer dereference in bmp_getdata triggered by crafted BMP image (bsc#1005084)
- CVE-2016-2089: invalid read in the JasPer's jas_matrix_clip() function (bsc#963983)
- CVE-2016-1867: Out-of-bounds Read in the JasPer's jpc_pi_nextcprl() function (bsc#961886)
- CVE-2016-1577, CVE-2016-2116: double free vulnerability in the jas_iccattrval_destroy function (bsc#968373)
- CVE-2015-5221: Use-after-free (and double-free) in Jasper JPEG-200 (bsc#942553)
- CVE-2015-5203: Double free corruption in JasPer JPEG-2000 implementation (bsc#941919)
- CVE-2008-3522: multiple integer overflows (bsc#392410)
- bsc#1006839: NULL pointer dereference in jp2_colr_destroy (jp2_cod.c) (incomplete fix for CVE-2016-8887)
- Record
SUSE-SU-2016:2776-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
jasperMageia:5 From an advisory covering 39 CVEs |
before 1.900.23-1.mga5 | 1.900.23-1.mga5 |
jasperSUSE:Linux Enterprise Desktop 12 SP1 From an advisory covering 20 CVEs |
before 1.900.14-181.1 | 1.900.14-181.1 |
jasperSUSE:Linux Enterprise Desktop 12 SP2 From an advisory covering 20 CVEs |
before 1.900.14-181.1 | 1.900.14-181.1 |
jasperSUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 From an advisory covering 20 CVEs |
before 1.900.14-181.1 | 1.900.14-181.1 |
jasperSUSE:Linux Enterprise Software Development Kit 12 SP1 From an advisory covering 20 CVEs |
before 1.900.14-181.1 | 1.900.14-181.1 |
jasperSUSE:Linux Enterprise Software Development Kit 12 SP2 From an advisory covering 20 CVEs |
before 1.900.14-181.1 | 1.900.14-181.1 |
jasperSUSE:Linux Enterprise Server 12 SP1 From an advisory covering 20 CVEs |
before 1.900.14-181.1 | 1.900.14-181.1 |
jasperSUSE:Linux Enterprise Server for SAP Applications 12 SP1 From an advisory covering 20 CVEs |
before 1.900.14-181.1 | 1.900.14-181.1 |
jasperSUSE:Linux Enterprise Server 12 SP2 From an advisory covering 20 CVEs |
before 1.900.14-181.1 | 1.900.14-181.1 |
jasperSUSE:Linux Enterprise Server for SAP Applications 12 SP2 From an advisory covering 20 CVEs |
before 1.900.14-181.1 | 1.900.14-181.1 |
Show 5 moreShow less
| Package | Affected | Fixed |
|---|---|---|
jasperSUSE:Linux Enterprise Software Development Kit 11 SP4 From an advisory covering 19 CVEs |
before 1.900.14-134.25.1 | 1.900.14-134.25.1 |
jasperSUSE:Linux Enterprise Server 11 SP4 From an advisory covering 19 CVEs |
before 1.900.14-134.25.1 | 1.900.14-134.25.1 |
jasperSUSE:Linux Enterprise Server for SAP Applications 11 SP4 From an advisory covering 19 CVEs |
before 1.900.14-134.25.1 | 1.900.14-134.25.1 |
jasperUbuntu:16.04:LTS |
All versions, plus listed versions 1.900.1-debian1-2.41.900.1-debian1-2.4ubuntu11.900.1-debian1-2.4ubuntu1.11.900.1-debian1-2.4ubuntu1.21.900.1-debian1-2.4ubuntu1.3 |
None known |
jasperopenSUSE:Tumbleweed From an advisory covering 30 CVEs |
before 1.900.14-3.1 | 1.900.14-3.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2016-8886 is a high vulnerability (CVSS 7.8) in Jasper Project Jasper, published November 10, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.92%, the 79th percentile. No source names a fixed version.
References
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22FCKKHQCQ3S6TZY5G44EFDTMWOJXJRD
blogs.gentoo.org/ago/2016/10/18/jasper-memory-allocation-failure-in-jas_malloc-jas_malloc-c
securityfocus.com/bid/93839
openwall.com/lists/oss-security/2016/10/25/11
bugzilla.redhat.com/show_bug.cgi?id=1388880
Show 65 moreShow less
nvd.nist.gov/vuln/detail/CVE-2016-8886
github.com/advisories/GHSA-9xmw-vfxq-m8h5
advisories.mageia.org/MGASA-2017-0474.html
bugs.mageia.org/show_bug.cgi?id=19605
lists.opensuse.org/opensuse-updates/2016-11/msg00010.html
suse.com/support/update/announcement/2016/suse-su-20162775-1
bugzilla.suse.com/1005084
ubuntu.com/security/CVE-2016-8886
cve.org/CVERecord?id=CVE-2016-8886