CVE-2016-10249

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.12

Description The issue is related to an integer overflow in the jpc dec tiledecode function, which can be triggered by a crafted image file. This overflow can lead to a heap-based buffer overflow, potentially allowing remote attackers to have an unspecified impact.

Recommendations For versions prior to 1.900.12, update to version 1.900.12 or later to resolve the issue. As a temporary workaround, consider restricting the processing of image files from untrusted sources until the update is applied.