CVE-2016-9262

Multiple integer overflows in the (1) jas_realloc function in base/jas_malloc.c and (2)...

5.5 Medium

Multiple integer overflows in the (1) jas_realloc function in base/jas_malloc.c and (2) mem_resize function in base/jas_stream.c in JasPer before 1.900.22 allow remote attackers to cause a denial of service via a crafted image, which triggers use after free vulnerabilities.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

1.72%Up 0.3 points since Feb 4, 2022

What each source reports

NVD Score used 5.5

Record: CVE-2016-9262
CVSS 3.0: 5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness: CWE-190
Updated: 2026-11-02

CVE List No score

Record: CVE-2016-9262
Updated: 2026-11-02

EUVDEUVD-2016-10073 No score

Record: EUVD-2016-10073
Updated: 2026-11-03

GitHub AdvisoriesGHSA-mqqx-q5h3-9hjf 5.5

Multiple integer overflows in the (1) jas_realloc function in base/jas_malloc.c and (2)...

Record: GHSA-mqqx-q5h3-9hjf
CVSS 3.0: 5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness: CWE-190
Updated: 2026-11-02

OSV 5.5

Record: CVE-2016-9262
CVSS 3.0: 5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2017:1208 7.8

Red Hat Security Advisory: jasper security update

Record: RHSA-2017:1208
CVSS 3.0: 7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 5 moreShow less

OSVMGASA-2017-0474 No score

Updated jasper packages fix security vulnerabilities

The jasper package has been updated and patched to fix several security issues.

Record: MGASA-2017-0474
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10869-1 No score

jasper-2.0.33-1.2 on GA media

These are all security issues fixed in the jasper-2.0.33-1.2 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10869-1
Updated: 2026-11-02

OSVSUSE-SU-2017:1901-1 No score

Security update for jasper

This update for jasper fixes the following issues:

Security issues fixed:

CVE-2016-9262: Multiple integer overflows in the jas_realloc function in base/jas_malloc.c and mem_resize function in base/jas_stream.c allow remote attackers to cause a denial of service via a crafted image, which triggers use after free vulnerabilities. (bsc#1009994)
CVE-2016-9388: The ras_getcmap function in ras_dec.c allows remote attackers to cause a denial of service (assertion failure) via a crafted image file. (bsc#1010975)
CVE-2016-9389: The jpc_irct and jpc_iict functions in jpc_mct.c allow remote attackers to cause a denial of service (assertion failure). (bsc#1010968)
CVE-2016-9390: The jas_seq2d_create function in jas_seq.c allows remote attackers to cause a denial of service (assertion failure) via a crafted image file. (bsc#1010774)
CVE-2016-9391: The jpc_bitstream_getbits function in jpc_bs.c allows remote attackers to cause a denial of service (assertion failure) via a very large integer. (bsc#1010782)
CVE-2017-1000050: The jp2_encode function in jp2_enc.c allows remote attackers to cause a denial of service. (bsc#1047958)

CVEs already fixed with previous update:

CVE-2016-9392: The calcstepsizes function in jpc_dec.c allows remote attackers to cause a denial of service (assertion failure) via a crafted file. (bsc#1010757)
CVE-2016-9393: The jpc_pi_nextrpcl function in jpc_t2cod.c allows remote attackers to cause a denial of service (assertion failure) via a crafted file. (bsc#1010766)
CVE-2016-9394: The jas_seq2d_create function in jas_seq.c allows remote attackers to cause a denial of service (assertion failure) via a crafted file. (bsc#1010756)

Record: SUSE-SU-2017:1901-1
Updated: 2026-11-02

OSVSUSE-SU-2017:1916-1 No score

Security update for jasper

This update for jasper fixes the following issues:

Security issues fixed:

CVE-2016-9262: Multiple integer overflows in the jas_realloc function in base/jas_malloc.c and mem_resize function in base/jas_stream.c allow remote attackers to cause a denial of service via a crafted image, which triggers use after free vulnerabilities. (bsc#1009994)
CVE-2016-9388: The ras_getcmap function in ras_dec.c allows remote attackers to cause a denial of service (assertion failure) via a crafted image file. (bsc#1010975)
CVE-2016-9389: The jpc_irct and jpc_iict functions in jpc_mct.c allow remote attackers to cause a denial of service (assertion failure). (bsc#1010968)
CVE-2016-9390: The jas_seq2d_create function in jas_seq.c allows remote attackers to cause a denial of service (assertion failure) via a crafted image file. (bsc#1010774)
CVE-2016-9391: The jpc_bitstream_getbits function in jpc_bs.c allows remote attackers to cause a denial of service (assertion failure) via a very large integer. (bsc#1010782)
CVE-2017-1000050: The jp2_encode function in jp2_enc.c allows remote attackers to cause a denial of service. (bsc#1047958)

CVEs already fixed with previous update:

CVE-2016-9392: The calcstepsizes function in jpc_dec.c allows remote attackers to cause a denial of service (assertion failure) via a crafted file. (bsc#1010757)
CVE-2016-9393: The jpc_pi_nextrpcl function in jpc_t2cod.c allows remote attackers to cause a denial of service (assertion failure) via a crafted file. (bsc#1010766)
CVE-2016-9394: The jas_seq2d_create function in jas_seq.c allows remote attackers to cause a denial of service (assertion failure) via a crafted file. (bsc#1010756)

Record: SUSE-SU-2017:1916-1
Updated: 2026-11-02

OSVSUSE-SU-2018:0339-1 No score

Security update for jasper

This update for jasper fixes the following issues:

Security issues fixed:

CVE-2016-9262: Multiple integer overflows in the jas_realloc function in base/jas_malloc.c and mem_resize function in base/jas_stream.c allow remote attackers to cause a denial of service via a crafted image, which triggers use after free vulnerabilities. (bsc#1009994)
CVE-2016-9388: The ras_getcmap function in ras_dec.c allows remote attackers to cause a denial of service (assertion failure) via a crafted image file. (bsc#1010975)
CVE-2016-9389: The jpc_irct and jpc_iict functions in jpc_mct.c allow remote attackers to cause a denial of service (assertion failure). (bsc#1010968)
CVE-2016-9390: The jas_seq2d_create function in jas_seq.c allows remote attackers to cause a denial of service (assertion failure) via a crafted image file. (bsc#1010774)
CVE-2016-9391: The jpc_bitstream_getbits function in jpc_bs.c allows remote attackers to cause a denial of service (assertion failure) via a very large integer. (bsc#1010782)
CVE-2017-1000050: The jp2_encode function in jp2_enc.c allows remote attackers to cause a denial of service. (bsc#1047958)

CVEs already fixed with previous update:

CVE-2016-9392: The calcstepsizes function in jpc_dec.c allows remote attackers to cause a denial of service (assertion failure) via a crafted file. (bsc#1010757)
CVE-2016-9393: The jpc_pi_nextrpcl function in jpc_t2cod.c allows remote attackers to cause a denial of service (assertion failure) via a crafted file. (bsc#1010766)
CVE-2016-9394: The jas_seq2d_create function in jas_seq.c allows remote attackers to cause a denial of service (assertion failure) via a crafted file. (bsc#1010756)

Record: SUSE-SU-2018:0339-1
Updated: 2026-11-02

Affected products

jasper project jasper

Affected packages

Affected packages
Package	Affected	Fixed
`jasper` Mageia:5 From an advisory covering 39 CVEs	before 1.900.23-1.mga5	1.900.23-1.mga5
`jasper` Red Hat:enterprise_linux:6::client From an advisory covering 30 CVEs	before 0:1.900.1-21.el6_9	0:1.900.1-21.el6_9
`jasper-debuginfo` Red Hat:enterprise_linux:6::client From an advisory covering 30 CVEs	before 0:1.900.1-21.el6_9	0:1.900.1-21.el6_9
`jasper-libs` Red Hat:enterprise_linux:6::client From an advisory covering 30 CVEs	before 0:1.900.1-21.el6_9	0:1.900.1-21.el6_9
`jasper-devel` Red Hat:enterprise_linux:6::client From an advisory covering 30 CVEs	before 0:1.900.1-21.el6_9	0:1.900.1-21.el6_9
`jasper-utils` Red Hat:enterprise_linux:6::client From an advisory covering 30 CVEs	before 0:1.900.1-21.el6_9	0:1.900.1-21.el6_9
`jasper` Red Hat:enterprise_linux:6::computenode From an advisory covering 30 CVEs	before 0:1.900.1-21.el6_9	0:1.900.1-21.el6_9
`jasper-debuginfo` Red Hat:enterprise_linux:6::computenode From an advisory covering 30 CVEs	before 0:1.900.1-21.el6_9	0:1.900.1-21.el6_9
`jasper-libs` Red Hat:enterprise_linux:6::computenode From an advisory covering 30 CVEs	before 0:1.900.1-21.el6_9	0:1.900.1-21.el6_9
`jasper-devel` Red Hat:enterprise_linux:6::computenode From an advisory covering 30 CVEs	before 0:1.900.1-21.el6_9	0:1.900.1-21.el6_9

Show 44 moreShow less

Affected packages
Package	Affected	Fixed
`jasper-utils` Red Hat:enterprise_linux:6::computenode From an advisory covering 30 CVEs	before 0:1.900.1-21.el6_9	0:1.900.1-21.el6_9
`jasper` Red Hat:enterprise_linux:6::server From an advisory covering 30 CVEs	before 0:1.900.1-21.el6_9	0:1.900.1-21.el6_9
`jasper-debuginfo` Red Hat:enterprise_linux:6::server From an advisory covering 30 CVEs	before 0:1.900.1-21.el6_9	0:1.900.1-21.el6_9
`jasper-libs` Red Hat:enterprise_linux:6::server From an advisory covering 30 CVEs	before 0:1.900.1-21.el6_9	0:1.900.1-21.el6_9
`jasper-devel` Red Hat:enterprise_linux:6::server From an advisory covering 30 CVEs	before 0:1.900.1-21.el6_9	0:1.900.1-21.el6_9
`jasper-utils` Red Hat:enterprise_linux:6::server From an advisory covering 30 CVEs	before 0:1.900.1-21.el6_9	0:1.900.1-21.el6_9
`jasper` Red Hat:enterprise_linux:6::workstation From an advisory covering 30 CVEs	before 0:1.900.1-21.el6_9	0:1.900.1-21.el6_9
`jasper-debuginfo` Red Hat:enterprise_linux:6::workstation From an advisory covering 30 CVEs	before 0:1.900.1-21.el6_9	0:1.900.1-21.el6_9
`jasper-libs` Red Hat:enterprise_linux:6::workstation From an advisory covering 30 CVEs	before 0:1.900.1-21.el6_9	0:1.900.1-21.el6_9
`jasper-devel` Red Hat:enterprise_linux:6::workstation From an advisory covering 30 CVEs	before 0:1.900.1-21.el6_9	0:1.900.1-21.el6_9
`jasper-utils` Red Hat:enterprise_linux:6::workstation From an advisory covering 30 CVEs	before 0:1.900.1-21.el6_9	0:1.900.1-21.el6_9
`jasper` Red Hat:enterprise_linux:7::client From an advisory covering 30 CVEs	before 0:1.900.1-30.el7_3	0:1.900.1-30.el7_3
`jasper-debuginfo` Red Hat:enterprise_linux:7::client From an advisory covering 30 CVEs	before 0:1.900.1-30.el7_3	0:1.900.1-30.el7_3
`jasper-libs` Red Hat:enterprise_linux:7::client From an advisory covering 30 CVEs	before 0:1.900.1-30.el7_3	0:1.900.1-30.el7_3
`jasper-devel` Red Hat:enterprise_linux:7::client From an advisory covering 30 CVEs	before 0:1.900.1-30.el7_3	0:1.900.1-30.el7_3
`jasper-utils` Red Hat:enterprise_linux:7::client From an advisory covering 30 CVEs	before 0:1.900.1-30.el7_3	0:1.900.1-30.el7_3
`jasper` Red Hat:enterprise_linux:7::computenode From an advisory covering 30 CVEs	before 0:1.900.1-30.el7_3	0:1.900.1-30.el7_3
`jasper-debuginfo` Red Hat:enterprise_linux:7::computenode From an advisory covering 30 CVEs	before 0:1.900.1-30.el7_3	0:1.900.1-30.el7_3
`jasper-libs` Red Hat:enterprise_linux:7::computenode From an advisory covering 30 CVEs	before 0:1.900.1-30.el7_3	0:1.900.1-30.el7_3
`jasper-devel` Red Hat:enterprise_linux:7::computenode From an advisory covering 30 CVEs	before 0:1.900.1-30.el7_3	0:1.900.1-30.el7_3
`jasper-utils` Red Hat:enterprise_linux:7::computenode From an advisory covering 30 CVEs	before 0:1.900.1-30.el7_3	0:1.900.1-30.el7_3
`jasper` Red Hat:enterprise_linux:7::server From an advisory covering 30 CVEs	before 0:1.900.1-30.el7_3	0:1.900.1-30.el7_3
`jasper-debuginfo` Red Hat:enterprise_linux:7::server From an advisory covering 30 CVEs	before 0:1.900.1-30.el7_3	0:1.900.1-30.el7_3
`jasper-libs` Red Hat:enterprise_linux:7::server From an advisory covering 30 CVEs	before 0:1.900.1-30.el7_3	0:1.900.1-30.el7_3
`jasper-devel` Red Hat:enterprise_linux:7::server From an advisory covering 30 CVEs	before 0:1.900.1-30.el7_3	0:1.900.1-30.el7_3
`jasper-utils` Red Hat:enterprise_linux:7::server From an advisory covering 30 CVEs	before 0:1.900.1-30.el7_3	0:1.900.1-30.el7_3
`jasper` Red Hat:enterprise_linux:7::workstation From an advisory covering 30 CVEs	before 0:1.900.1-30.el7_3	0:1.900.1-30.el7_3
`jasper-debuginfo` Red Hat:enterprise_linux:7::workstation From an advisory covering 30 CVEs	before 0:1.900.1-30.el7_3	0:1.900.1-30.el7_3
`jasper-libs` Red Hat:enterprise_linux:7::workstation From an advisory covering 30 CVEs	before 0:1.900.1-30.el7_3	0:1.900.1-30.el7_3
`jasper-devel` Red Hat:enterprise_linux:7::workstation From an advisory covering 30 CVEs	before 0:1.900.1-30.el7_3	0:1.900.1-30.el7_3
`jasper-utils` Red Hat:enterprise_linux:7::workstation From an advisory covering 30 CVEs	before 0:1.900.1-30.el7_3	0:1.900.1-30.el7_3
`jasper` SUSE:Linux Enterprise Software Development Kit 11 SP4 From an advisory covering 9 CVEs	before 1.900.14-134.33.3.1	1.900.14-134.33.3.1
`jasper` SUSE:Linux Enterprise Server 11 SP4 From an advisory covering 9 CVEs	before 1.900.14-134.33.3.1	1.900.14-134.33.3.1
`jasper` SUSE:Linux Enterprise Server for SAP Applications 11 SP4 From an advisory covering 9 CVEs	before 1.900.14-134.33.3.1	1.900.14-134.33.3.1
`jasper` SUSE:Linux Enterprise Desktop 12 SP2 From an advisory covering 9 CVEs	before 1.900.14-195.3.1	1.900.14-195.3.1
`jasper` SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 From an advisory covering 9 CVEs	before 1.900.14-195.3.1	1.900.14-195.3.1
`jasper` SUSE:Linux Enterprise Software Development Kit 12 SP2 From an advisory covering 9 CVEs	before 1.900.14-195.3.1	1.900.14-195.3.1
`jasper` SUSE:Linux Enterprise Server 12 SP2 From an advisory covering 9 CVEs	before 1.900.14-195.3.1	1.900.14-195.3.1
`jasper` SUSE:Linux Enterprise Server for SAP Applications 12 SP2 From an advisory covering 9 CVEs	before 1.900.14-195.3.1	1.900.14-195.3.1
`jasper` SUSE:Linux Enterprise Desktop 12 SP3 From an advisory covering 9 CVEs	before 1.900.14-195.5.1	1.900.14-195.5.1
`jasper` SUSE:Linux Enterprise Software Development Kit 12 SP3 From an advisory covering 9 CVEs	before 1.900.14-195.5.1	1.900.14-195.5.1
`jasper` SUSE:Linux Enterprise Server 12 SP3 From an advisory covering 9 CVEs	before 1.900.14-195.5.1	1.900.14-195.5.1
`jasper` SUSE:Linux Enterprise Server for SAP Applications 12 SP3 From an advisory covering 9 CVEs	before 1.900.14-195.5.1	1.900.14-195.5.1
`jasper` openSUSE:Tumbleweed From an advisory covering 38 CVEs	before 2.0.33-1.2	2.0.33-1.2

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2016-9262 is a medium vulnerability (CVSS 5.5) in Jasper Project Jasper, published March 23, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.72%, the 77th percentile. No source names a fixed version.

References

Show 178 moreShow less