CVE-2017-13746

No fix known EPSS 4%

There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1297 in JasPer 2.0.12 that will lead to a remote denial of service attack.

Published 2017-08-29 · CVE record · OSV

Products: jasper_project jasper, fedoraproject fedora