VULNERABILITY INTELLIGENCE

CVE-2016-8693

CVSS score7.8 HIGH

EPSS probability3.32%

CISA KEVNot currently listed

Published2017-02-15

Last modified2026-06-17

Description

Double free vulnerability in the mem_close function in jas_stream.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image to the imginfo command.