CVE-2016-10250
The jp2_colr_destroy function in jp2_cod.c in JasPer before 1.900.13 allows remote attackers to...
CVE-2016-10250 is a high vulnerability (CVSS 7.5) in Jasper Project Jasper, published March 15, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.98%, the 90th percentile. Fixed in jasper 1.900.23-1.mga5.
The jp2_colr_destroy function in jp2_cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service (NULL pointer dereference) by leveraging incorrect cleanup of JP2 box data on error. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8887.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
The jp2_colr_destroy function in jp2_cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service (NULL pointer dereference) by leveraging incorrect cleanup of JP2 box data on error. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8887.
- Record
CVE-2016-10250- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-476
- Updated
- 2026-11-02
CVE List No score
The jp2_colr_destroy function in jp2_cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service (NULL pointer dereference) by leveraging incorrect cleanup of JP2 box data on error. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8887.
- Record
CVE-2016-10250- Updated
- 2026-11-02
EUVDEUVD-2016-1435 No score
The jp2_colr_destroy function in jp2_cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service (NULL pointer dereference) by leveraging incorrect cleanup of JP2 box data on error. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8887.
- Record
EUVD-2016-1435- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hc76-569j-jf8q
The jp2_colr_destroy function in jp2_cod.c in JasPer before 1.900.13 allows remote attackers to...
The jp2_colr_destroy function in jp2_cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service (NULL pointer dereference) by leveraging incorrect cleanup of JP2 box data on error. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8887.
- Record
GHSA-hc76-569j-jf8q- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-476
- Updated
- 2026-11-02
OSV
The jp2_colr_destroy function in jp2_cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service (NULL pointer dereference) by leveraging incorrect cleanup of JP2 box data on error. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8887.
- Record
CVE-2016-10250- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2016-10250
The jp2_colr_destroy function in jp2_cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service (NULL pointer dereference) by leveraging incorrect cleanup of JP2 box data on error. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8887.
- Record
UBUNTU-CVE-2016-10250- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVMGASA-2017-0474 No score
Updated jasper packages fix security vulnerabilities
The jasper package has been updated and patched to fix several security issues.
- Record
MGASA-2017-0474- Updated
- 2026-11-02
OSVUSN-3693-1 No score
jasper vulnerabilities
It was discovered that JasPer incorrectly handled certain malformed JPEG-2000 image files. If a user or automated system using JasPer were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program.
- Record
USN-3693-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
jasperMageia:5 |
before 1.900.23-1.mga5 | 1.900.23-1.mga5 |
jasperUbuntu:14.04:LTS |
before 1.900.1-14ubuntu3.5, plus listed versions 1.900.1-141.900.1-14ubuntu31.900.1-14ubuntu3.11.900.1-14ubuntu3.21.900.1-14ubuntu3.31.900.1-14ubuntu3.4 |
1.900.1-14ubuntu3.5 |
jasperUbuntu:16.04:LTS |
before 1.900.1-debian1-2.4ubuntu1.2, plus listed versions 1.900.1-debian1-2.41.900.1-debian1-2.4ubuntu11.900.1-debian1-2.4ubuntu1.1 |
1.900.1-debian1-2.4ubuntu1.2 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
github.com/mdadams/jasper/commit/bdfe95a6e81ffb4b2fad31a76b57943695beed20
blogs.gentoo.org/ago/2016/10/23/jasper-null-pointer-dereference-in-jp2_colr_destroy-jp2_cod-c-incomplete-fix-for-cve-2016-8887
usn.ubuntu.com/3693-1
nvd.nist.gov/vuln/detail/CVE-2016-10250
advisories.mageia.org/MGASA-2017-0474.html
Show 30 moreShow less
bugs.mageia.org/show_bug.cgi?id=19605
lists.fedoraproject.org/archives/list/[email protected]/thread/THLEZURI4D24PRM7SMASC5I25IAWXXTM
lists.opensuse.org/opensuse-updates/2016-11/msg00010.html
ubuntu.com/security/CVE-2016-10250
seclists.org/oss-sec/2017/q1/608
cve.org/CVERecord?id=CVE-2016-10250