CVE-2017-13752

There is an infinite loop in the jpc_dec_tileinit function in jpc/jpc_dec.c of Jasper 2.0.13, which may lead to a remote denial of service attack.

There is a reachable assertion abort in the function calcstepsizes() in jpc/jpc_dec.c in JasPer 2.0.12 that can lead to a remote denial of service attack.

There is a reachable assertion abort in the function jpc_dec_process_siz() in JasPer 2.0.12 that may lead to a remote denial of service attack.

There is a reachable assertion abort in the function jpc_pi_nextrpcl() in jpc/jpc_t2cod.c in JasPer 2.0.12 that will lead to a remote denial of service attack.

There are lots of memory leaks in JasPer 2.0.12, triggered in the function jas_strdup() in base/jas_string.c, that will lead to a remote denial of service attack.

There is a reachable assertion abort in the function jpc_floorlog2() in JasPer 2.0.12 that can lead to a remote denial of service attack.

There is a reachable assertion abort in the function jpc_dec_process_siz() in JasPer 2.0.12 that can lead to a remote denial of service attack.

There is a reachable assertion abort in the function jpc_dec_process_sot() in JasPer 2.0.12 that can lead to a remote denial of service attack due to an unexpected jpc_ppmstabtostreams return value.

JasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2_encode which failed to check to see if the image contained at least one component resulting in a denial-of-service.

The calcstepsizes function in jpc_dec.c in JasPer 1.900.22 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.