VULNERABILITY INTELLIGENCE
CVE-2011-4516
CVSS score6.8 MEDIUM
EPSS probability10.49%
CISA KEVNot currently listed
Published2011-12-15
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted numrlvls value in a coding style default (COD) marker segment in a JPEG2000 file.
Weakness classification
- CWE-787: Out-of-bounds Write
Primary references
- cret@cert.org — Mailing List, Third Party Advisory
- cret@cert.org — Mailing List, Third Party Advisory
- cret@cert.org — Mailing List, Third Party Advisory
- cret@cert.org — Broken Link
- cret@cert.org — Third Party Advisory
- cret@cert.org — Not Applicable
- cret@cert.org — Not Applicable
- cret@cert.org — Not Applicable
- cret@cert.org — Broken Link
- cret@cert.org — Third Party Advisory
- cret@cert.org — Third Party Advisory, US Government Resource
- cret@cert.org — Third Party Advisory