{"id":"CVE-2016-9557","details":"Integer overflow in jas_image.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service (application crash) via a crafted file.","modified":"2026-04-01T23:56:50.192601Z","published":"2017-03-23T18:59:01.147Z","related":["MGASA-2017-0474","SUSE-SU-2020:2690-1","openSUSE-SU-2024:10869-1"],"references":[{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/94490"},{"type":"ADVISORY","url":"https://blogs.gentoo.org/ago/2016/11/19/jasper-signed-integer-overflow-in-jas_image-c"},{"type":"ADVISORY","url":"http://www.openwall.com/lists/oss-security/2016/11/23/2"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1398251"},{"type":"FIX","url":"https://github.com/mdadams/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/jasper-software/jasper","events":[{"introduced":"0"},{"fixed":"d42b2388f7f8e0332c846675133acea151fc557a"}]},{"type":"GIT","repo":"https://github.com/mdadams/jasper","events":[{"introduced":"0"},{"last_affected":"7a9817a42645fd2c70537ae947757c3d8f5a2c75"}],"database_specific":{"versions":[{"introduced":"0"},{"last_affected":"1.900.24"}]}}],"versions":["mdadams-clang-issue","version-1.900.1","version-1.900.10","version-1.900.11","version-1.900.12","version-1.900.13","version-1.900.14","version-1.900.15","version-1.900.16","version-1.900.17","version-1.900.18","version-1.900.19","version-1.900.2","version-1.900.20","version-1.900.21","version-1.900.22","version-1.900.23","version-1.900.24","version-1.900.3","version-1.900.4","version-1.900.5","version-1.900.6","version-1.900.7","version-1.900.8","version-1.900.9"],"database_specific":{"vanir_signatures":[{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-01530ac5","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["75407959930246373012184773905817060004","152008321437455474971375490160859867145","249275452104097945452985471807790560480","140839612899313474321509427713496127305"],"threshold":0.9},"target":{"file":"src/libjasper/pnm/pnm_dec.c"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-027ca67f","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["143588944435324991809834463775929592113","228212408722449306169322988872252717949","338002433179118604158583492772425347027","224215851204740424139492417028622373058"],"threshold":0.9},"target":{"file":"src/libjasper/ras/ras_dec.c"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-031d7943","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["242738746127867894046090909482582186260","293969653858907810554252025247546764277","288462039965629328625211038531626144862","195514518354725281028924194018108521554"],"threshold":0.9},"target":{"file":"src/libjasper/jpc/jpc_mqdec.h"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-08ac8859","signature_type":"Function","deprecated":false,"digest":{"length":1895,"function_hash":"160847846044344291394352663677404150726"},"target":{"function":"main","file":"src/appl/imginfo.c"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-1557647a","signature_type":"Function","deprecated":false,"digest":{"length":253,"function_hash":"290104904681168313401961387249447800425"},"target":{"function":"jpc_ppm_putparms","file":"src/libjasper/jpc/jpc_cs.c"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-1740770d","signature_type":"Function","deprecated":false,"digest":{"length":2886,"function_hash":"232589406645102967347377562915042424578"},"target":{"function":"bmp_decode","file":"src/libjasper/bmp/bmp_dec.c"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-17ab6070","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["130058957231449655542485978447573611566","39273477785933465993126388138558883970","2138320571176908637271844509488029054","168019074456530365098748846972788174036","339881602136717755843794368518119893584","306363742472579818469986742592702381536","79251945795636057576989312798141087677","44323687333533617319453288928927361252","79005170399495630307738612952135483845","323709906243293079137794626189251140468","310284726005089278561196024473739608053","326008588772781261260059032705074219712","167938147641578917604152612016696102754","71602586814235625794153230161921763414","168855220134897647723501236461295869585","157323617680011196363320761600484008094","214101161657025425007550027422627712415","167938147641578917604152612016696102754","29338366059847159811221054538359472444","107065874990576435994484721543978672851","72305428056349983754247426721015645523","232858631765533754508691295041692789305","320977932886412435439489676965288417666","66682667984095472076212559559806024501","98931948089239009377790176561379308937","84947153841549224050804500802562886729","93390493901142216434559241802470885503","97751424720397631767753269396377005244","270933782230744608250846399099749102613","328763213243816788116557403599736452561","136732172906980857274681790187185786946","241896637591094797159761066491527021133","205481015176931330626149268821641270907","51613821632689578885138802485085766990","219276214170955763305935963631127424266","153519916069736451097578905018931189048","300373055050672490919514414968933942468","148786688456424785255955907058253588198","246302399879896625134250257534076863224","121636174523533699766355621884645789050","221832230279129595478448040756998548581","258276265576511413861119282676515601530","328618068354454107883731985900319712547","125323688549072958889474193821878839927","259548770273081008237639263987825423064","318003617652379767646954964169253196660","339888872140906406431499757757793538093","306478428088983649792474064768004500590","161478164694187995913126450169959088306","322245732538655010821355628659503272762","332471260719374452321389862648003521155","99057495491498089186724904782873284511","184023778437993693502752625482373528016","33273383273844043539995831120939131907","259913209786681946796377079368401794780","333164880321312434731624727014758291891","272660779394200767410545254834838675048","258276265576511413861119282676515601530","328618068354454107883731985900319712547","125323688549072958889474193821878839927","225624511032213785172932336622374486063","142128701578554615941004548372406008436","112450350798461890542928403000070935138","279856187884459290970999010544363104150","258276265576511413861119282676515601530","328618068354454107883731985900319712547","125323688549072958889474193821878839927","259548770273081008237639263987825423064","318003617652379767646954964169253196660","306781255944019129777186558457277296922","307652028096911278120209694993482913050","128039505170195891206016598731189553540","178268215330056626362811036579226523588","140312087635518800866377219327785222744","7697802114162517903705685318337759634","225205777879279587307842464110475533025","136690973338016903196384890787369816125","249764160725414783480839749911333155892","258276265576511413861119282676515601530","328618068354454107883731985900319712547","125323688549072958889474193821878839927","259548770273081008237639263987825423064","318003617652379767646954964169253196660","201902810340504498275885109613553474826","103245857651171287418817990659353870407","37247665375001377201902960897795860932","123638483581790717005530887853633675492","336905327797834436701965493688462341913","70071494556518360031796974833210406285","326256413126338682003786533505540068010","18481334348553418454005577739645118378","9184851205228471580341047939288692035","183821239862646776204151197860640312825","162622639707977179246698615056501228804","72848543563696357813004233319408345084","29501333934789785811958068299162655791","105959533544615689038818620815315593538","157570068216375859013406417573558775113","52046034693935066865278468676075477587","225943113488735095734278781735374005842","191696302927474320256069033518902041307","31860469078331022540070471008094933543","284063139059686696097019017864741805213","318662227778930245425960188907260282686"],"threshold":0.9},"target":{"file":"src/libjasper/base/jas_seq.c"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-1b8fb69e","signature_type":"Function","deprecated":false,"digest":{"length":858,"function_hash":"305760283149531125930187963107419725588"},"target":{"function":"jas_stream_initbuf","file":"src/libjasper/base/jas_stream.c"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-247c2829","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["245078885111418341020743783788016058665","234728866148125766189819840651250502867","338774283399251703256057925119969834159","156081712382318900555495251680365055250"],"threshold":0.9},"target":{"file":"src/libjasper/jpg/jpg_val.c"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-252f986b","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["331184738075909088112760862691890390437","121818810125295755576468154154266742452","339806358044275872704704503633566881607","23784063818283770685019065431685792955","257044469235987510527988280859972212746"],"threshold":0.9},"target":{"file":"src/libjasper/include/jasper/jas_fix.h"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-2b106f7e","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["256276866803337448393796732074751244751","38425483444248478583262126775088388912","111473184497168663805274821791622235659","240228677296023206003429295518462952342","86485999787558177492012905478254133729","286099010098445702811988195157902023892","265481693933772724316933778197735577993","67659078853721395539897488588930186781","281608165394795114904211875110535095601","51011225832503409913151261775547157066","37518496947379250442664054619081101482","271522064218097904406309345052456821040"],"threshold":0.9},"target":{"file":"src/libjasper/jpc/jpc_cs.c"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-2c15312a","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["216663878521658677485042134700327458036","292310132919158522289461769503666336506","40559392906424984315375472137063953462","303122794062859623009556069609593309574","237901226896642616060084901615068514513","105706703266359124224686493739689109583","150405980216672018287049755456995662779"],"threshold":0.9},"target":{"file":"src/libjasper/base/jas_iccdata.c"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-31b97db4","signature_type":"Function","deprecated":false,"digest":{"length":553,"function_hash":"315288654331649611591954635315406228087"},"target":{"function":"jpc_ppm_getparms","file":"src/libjasper/jpc/jpc_cs.c"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-3653a248","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["103383357411585448676400247118903119617","75592567921484735848128835934272561631","287957741085054758312041380596084444050","161655188963507838963052204795859678656","288177248760464346214609652181566006092","314335655162595625138244967158679208418","93078831424026107317855727950081282960","123477958719943942469645647932761741682","173956451480587607789572215882445821661","54187596666765228063546251424914307688","223179868740128902395180677358124581964","28382870672919273386701623677398538654","46854758010053177730074211004328434787","90697183169573022825929919420469412946","51452674486950200764266544428041173242","128743885057858258989325717599754455545","322992816063882436735906599633731110649","36287008554964174340065032220578534907","161543723576827153555537856856661014154","298174916019768804939383887924821509131","200049118474810241712425529827796599481","55998800178404513328391118310706242682","182421303497237456370286598224489407924","337155840850107241703410742074544373085","295142024771273041857585365593661950301","129957217734569342215617896650625743561","211789184202597405004199394365321312783","331704613793764420639759014014510468314","311085281873738716606178709326971024186","102215955986569536436272881767696272739","67204410295728821758399194139925344361","227712646298685278865999461175202512362"],"threshold":0.9},"target":{"file":"src/libjasper/include/jasper/jas_seq.h"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-3aba1603","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["325383478266209106277510419132044106507","143308954541090238222470705221036095599","257044469235987510527988280859972212746"],"threshold":0.9},"target":{"file":"src/libjasper/include/jasper/jas_debug.h"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-4c257c00","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["146639629657393807452618712272958641168","13666968981577902241687783259363780308","173234202143925127430254680887544807547","38376658736871382736284123156836800065","223657238042690278352604120146313156906","3381543234486433604880018400082437173","192104077763154549649040528775755784585","198281877056444963281738124719901363869","257881004979947914297577538818575446170","267633490603143745550230982424751355398","221126328714900777398303595705425997459","312819642006019823689128260300450840093","59205668032774035866474641443927126377","252537028367516966415831113960354158215","235260035542404810376182438667302224817","253679924570002653277208191558863778043","81707831946715582207083540719715680035","162680325970524115422205968758765418279","170053112774569928776799602367229433003","129210761667170328744260800386294493718","130231620685268529327174497747286521687","337238925333527792157185863032306467424","308722199379669224431030749412652848424","215974179150160540498427144195447227938","91283664917611637084455201833698395676","289922841409899663687453944954637991776","102418235204890154468687255360956198041","245372685433636736671439638473903381250","203983082637090308098349699858815952960","21496090730592899898401364422556686414","234913283136574434372111886079049200587","273462138942521171950450465744040504219","306084304547442282626223917196416327265"],"threshold":0.9},"target":{"file":"src/appl/imginfo.c"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-539c0444","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["332426540348190115762916653665801932442","81473378552763930317309948196572872141","276080430252131191241809187114230421391","289963138942939564533993376911808399387","83481605516474531704632532985813219771","145520421831599911112596725555974118145","267211542290382516473591191019887039004","186058494638153513478005834267318848419","81097618434557958589955022136186493304","30744263110624714025151830785386292327","184174389746529660596357481298067285469","255916707948948814763530503916974095483","309961971056205386433599401244372962140","191398032198478813448126510093081104306","253475632925336157757811661255140077687","290623017021902418325765514060179252790","5774342450351964345292214109368747729","181943473088421242081825003378493728626","14955465143490777032087198389647880752","230386077586217829981155118781138626291","2229351694745774344030755489625411277","260447282767520360636231779400566423569","185596834548956196002290184402904912806","319142928082264814522950168346308914050","55418038597956312249933605047219446608"],"threshold":0.9},"target":{"file":"src/libjasper/include/jasper/jas_types.h"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-5d393d26","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["185761063031220165154061107022057922371","261765807050165188350280112157283759008","208139841916888479291889740714962351108","160701017530012934291712826600958194491","13377487976051934351753823291261491064","19699907073925705529061989734585241199","57752385214823717864685510967967667587","222208324448762065740801627140103918161","74291769383020248320198223804580627610","283274482877478085204418516061890621627","301483147721775479150676380492790093815","140818025506515325979453643025248702906","337632996669320281499025537208938585603","199654388524346067615248901856643330471","331661452620491590446327276293820363195","172714968163368718031979495930812152355","280603683873548077195728231519350440243","276285440005378755142127509476381746752","258836899800601432066945417876289454493","197124675074230428436185113347721518531","88630949943724290615732045711316663835","265545563093154162386500720805599741605","189419738795899665011259200102671877055","162112717068394164168981435973823199696","251773173605588404991368800427004066514","223528284757474354742926446014616082256","17206570099570661111446537569300184154","320631271179316592021840291023120472415","196091221403885038732053119561253171336","238285240523552416755160460214295495596","96395658860028351364220850035123358083","130766418030947014754692709386918895753","28994124512236610706104671739592473339","93243313887617652913334830039334738117","223528284757474354742926446014616082256","114365180790949798829962240156684257275","307213083842826423647387320579624912180","252470134939173444597545303287084132080","168574478259895458452707332875606574468","35238412864555365747246771963937557911","38475987534872026567794106278818538120","241718988681333201256240829811394393781","76087080087832426050007316504926836109","107460918865208978416963804518152165948","81458877793812350665558348270946312150","53379912702287160606938768848865723643","286441642310770879878189641879858562886","118007452506171777110908489074032124238","170188019298024975722713780112538381619","248819911158317968212056400789305534639","22946357326048990425205680201809891782","161719232053982003356396861098724740643","325594312191497317771299083917975170809","171330240060993847633660929078689244411","139238427344683744279816032683775316434","167623075501600780210404490496906304001"],"threshold":0.9},"target":{"file":"src/libjasper/base/jas_icc.c"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-624d663c","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["129026383907455230626036765347018180975","286111222547659888990121658677747085206","153384600861342376122145868832725452551","42291723653983009448556152889065335590"],"threshold":0.9},"target":{"file":"src/libjasper/jpc/jpc_dec.c"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-698295e3","signature_type":"Function","deprecated":false,"digest":{"length":693,"function_hash":"76951526390472194644471225556826221177"},"target":{"function":"jas_seq2d_input","file":"src/libjasper/base/jas_seq.c"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-766d3944","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["180133752826329510100072572177914004548","316316906444586707624755969126821487364","258277639029178464734725583634202862205","319643054775359113576566704387516979516","276188941175815538479513337982248502983","60314158612787738444618398829040918248","127496644181012095952365173491103593182","184311443799760078727840298095238018593","293233177924663431891778066404792182282"],"threshold":0.9},"target":{"file":"src/libjasper/base/jas_tmr.c"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-8a49bd2d","signature_type":"Function","deprecated":false,"digest":{"length":473,"function_hash":"158572805243861408866848605321691471765"},"target":{"function":"jpg_dec_parseopts","file":"src/libjasper/jpg/jpg_dec.c"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-90ce4783","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["255189479363890037676170734053135146435","29300507187751046663823667808771088157","296584207167919930062034563795525848958","218056867531258915709454867630880139098","201634669303807441185973579422764844166","179160290225384270360169249816577394856","20434480209421063578058507967012516474","97703479360674208197699367133523708446","188890048507393423074176937180778053382","300570721469669456280756203517640938170","255143595239846738163503461525546319034","323096767147957922401866201419008329256","316474864812017378751962897904414501052","335237099865778147308217166657340926811","127727224618865988230691119374694581730","223277916855455429608931994684865784584"],"threshold":0.9},"target":{"file":"src/libjasper/base/jas_stream.c"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-9a4064bc","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["21561385052456918100836723763955563586","17343764977487341976129753019369072623","6802035294305981020893724142790474529"],"threshold":0.9},"target":{"file":"src/libjasper/include/jasper/jas_config2.h"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-9c31a152","signature_type":"Function","deprecated":false,"digest":{"length":263,"function_hash":"44569155555959986991226066369739122474"},"target":{"function":"jas_iccgetsint32","file":"src/libjasper/base/jas_icc.c"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-9f2d5734","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["209314822272346125621318297552490723291","49907609372192859982718542991163697721","317657933038419420841405542563137662247","242230301083132737283604678273214104100","19770407421108195792510600336122287250","26459523256889858781645276123411470058"],"threshold":0.9},"target":{"file":"src/libjasper/include/jasper/jas_image.h"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-b19d7606","signature_type":"Function","deprecated":false,"digest":{"length":1239,"function_hash":"31320305027673464596347329517151107504"},"target":{"function":"jpc_getms","file":"src/libjasper/jpc/jpc_cs.c"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-b1a30b13","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["52691993390114141497313474131558049641","53591053480410443644545770110603980204","187058072140640598397562387248022380631","20370243810506275975917336947978929565","265350796661395898606722029944282352686","189614456841542499667930434933926894680","131664410369584817813442563610634172767","321899071398232470057113693398837224178","284153046980302142545562435396315251644","65535313564097936558525847778337117819","335056366114849629697964170988831675313","173100341195456761576015967865814937985","139510450792164860748387961143074360961","175398813161232751964066577805944366298","243515260902762732735210388866731013288","221761821226193990944708207452728463167","51732527290494445554156671405675906256","183739580496197522169333312796828454696","125397624024588008657795297143898561035","229416107999734016815546418994887035885","313728787523404969190385506263084530633","233206081753445273449362436414688986174","194003577158044813156371961473723602323","107680440819370237248483723380220031013","258411076848095561677974601225317676836","9466112086394818124303197532428451572","318401568861980245847216941668003978161","184207346788193302698986319646273174159","272207287058495533840100150601798968573","289791262787001388980797404754978984716","322167767617317903190671877369915527931","182071396579032594133401630351089289126","50675179662830910913121019762011394489","261413988414697729617383595841152370397","116971830546440970521458027212676605186","730222337804786181756174626192205927","41260527713065973744440930912066672603","133433647279360703601689615385830573832","247193659422456624457645183969178412302","127964953596307704768988993907735964474","186752883999570514110079410048707870804","147646246528327436157221751011498447945","13194427718706755830566036238772810627","193130801263303872613819084742706407781"],"threshold":0.9},"target":{"file":"src/libjasper/bmp/bmp_dec.c"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-b1f19892","signature_type":"Function","deprecated":false,"digest":{"length":1232,"function_hash":"24205465755140955747472839893042379848"},"target":{"function":"jas_image_cmpt_create","file":"src/libjasper/base/jas_image.c"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-b4d619d8","signature_type":"Function","deprecated":false,"digest":{"length":951,"function_hash":"267978105731266976275343414126110144243"},"target":{"function":"jas_image_create","file":"src/libjasper/base/jas_image.c"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-b5d8ea95","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["272851089838129066239035122692000710542","93303557555409514946714728513292033376","286972083829186974277738208590781535964","108768177526584233322157438400506114022"],"threshold":0.9},"target":{"file":"src/libjasper/base/jas_debug.c"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-b8d7604d","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["153022442092300945379705672679029732700","320201003479958811235344541290663203968","269244385535436723185119178650486656817","316998042480919492366146468025778981735"],"threshold":0.9},"target":{"file":"src/libjasper/jpc/jpc_enc.c"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-c30d747c","signature_type":"Function","deprecated":false,"digest":{"length":335,"function_hash":"28507652313604177189069996700138572277"},"target":{"function":"jas_image_create0","file":"src/libjasper/base/jas_image.c"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-c5d3835e","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["14171175387323840823507926071819460431","272374021281166477513776020571440872309","122935441851780089068252417632811551888","99318052193826176038368194574355086695","107696464398418086469207663952811472531","88165601581473831991015425501363903246","281909762435248427918355507783555844646","191758073755720009085189550583937287079","110210437687814691295728738703732552849","222123957715637330894741565217301026510","294816122730082166860335984390353271209","290330753297743370449131719363651143989"],"threshold":0.9},"target":{"file":"src/libjasper/jpc/jpc_cs.h"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-cf3730b0","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["126391967803827589984401420715975890201","244627382730683217168665748990410883259","230185951026260557795236047917587811811","129479158493413823942767450629194199280","158452712781405372673340085277145256226","322790250281575651604336256762966902210","63663849604969257400747350369853480419","119268902959697679589579923420661337731","300924059027561647354480105631339454846","134047577502461818011912400143134664184","161283561167878147137715042461340688420","67500109594028643757712573846966682137","181516418366726045655815240578097795903","216862755497464971350149721237231646540","244415830351755795182499553736254729461","304410329120257217594961491149012030928","70783488351930466862108551076699641042","120753622625368355597562348024087029343","269363570747403213586038059865706453164","158730624237433999602881827914849201462","134425638659606848842470281705742693889","112731664843475215237780817560263218443","319851798028636040599913781949054825671","217856478354277212672468402688307499055","211722552998626148742057577172801988432"],"threshold":0.9},"target":{"file":"src/libjasper/include/jasper/jas_stream.h"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-d287a7ec","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["247061704968144631063239169425445491888","315888784878612427910365838414452743306","227296053240876988416501094430288597204","167557534964712788399739007046361559662","83579954291089482715727120364873452562","141066574995424532218871885641431015639","135747527534385387955086987423436799798","266804987528273956492017155454075673949"],"threshold":0.9},"target":{"file":"src/libjasper/pgx/pgx_dec.c"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-db0b0964","signature_type":"Function","deprecated":false,"digest":{"length":6050,"function_hash":"96039812173139421705712739455227562415"},"target":{"function":"jpc_enc_encodemainhdr","file":"src/libjasper/jpc/jpc_enc.c"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-db217f64","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["81171973213347669340146794408202891327","264041085198423029684238787424946372571","56070182799804565177271121688619993698","190509842508523686092486884443644278809","301587775739142573922826685657072374537","5528104421005004396562115248282962234","232358632632680007893898481581521843853","322343088871850130626498980800448141773","294018847667033709994198332894471738316","79721982678775095276124477541153153661","328552005771870489418537953729512343105","95349664661014913296269995568943071101","80798751167878130080770292378786103073","240122067522597794692958251089846861606","233368625469115083013411971910231308227","48799304243337361670399699720884866753","287566026875244626562700084675855968347"],"threshold":0.9},"target":{"file":"src/libjasper/include/jasper/jas_icc.h"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-db86ce83","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["114927324300042811219808422889429992359","255655987739030457005990787358712072120","189267408333843498370668317776296079950","167424979675838322990726671727110555744","271122592058076355276502741551067590595","162734984308242337796549923754284389181","82845371320382469908068141542147596493","291022476575664358551448530838807863967","176153559493880806985555624389994894293","172065653934021973833815885004952153185","234377872091449754441085400790678879793","279325225499114827497000269028760472345","43041946650302775614651408768010471509","140340392728396279470275434405294231444","155152689223161929703938516078206773974","214821874305930587178784269063749872418","268614540557785316955562907818430607107","271017946563517242851160302745820713647","53937690312715921329152563271135526974","239699754472832131970340613066655800648","227493504719749566331008059068845119219","140412433147481474453866572476720331142","164676301634052372462241407729599647554","224889720838737560506196588199747962106","114447294173302878080954949134258257003","217449542810145408944471913080117343139","319452518049441338750967469287439996628","199886533440642994632796130725953625382","26804730416618753487814919690294524891","297848308291035731926720214387284314969","91196970558823803580743915980777297112","285378864135397436752403676343073759885","209892233517962511016329626075076077798","103187751360293681690896994632464627553","311391119448205652036040256079980562605","275425246208449898945811170779596183821","69705761191850100374313511630913402768","290917939105876450470226325250646473455","299431726372631526254404207607808066971","70366661542862278731224144074577181599","37498859522160511234314101739602101791","110673386075520209742732340894167014043","281405783059715480977604247750859068238"],"threshold":0.9},"target":{"file":"src/libjasper/jpg/jpg_dec.c"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-dec45510","signature_type":"Function","deprecated":false,"digest":{"length":7292,"function_hash":"14527487463130255458823227782505409422"},"target":{"function":"jp2_decode","file":"src/libjasper/jp2/jp2_dec.c"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-df665ca8","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["198285905186742700055928168791488775994","209646139376132954845273611768853190286","132699349001362846091267966874424042836","290177165085846847248337543147634739768"],"threshold":0.9},"target":{"file":"src/libjasper/jpc/jpc_dec.h"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-e5fa182e","signature_type":"Function","deprecated":false,"digest":{"length":3373,"function_hash":"191934069744835109587893451722855918623"},"target":{"function":"jpg_decode","file":"src/libjasper/jpg/jpg_dec.c"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-eac5da05","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["273457891272864180269457523443144228485","290134625355054451810423326681697447620","302082151563016248943880330221789038170","92540549550508062844734891481305098810","46740729548409113904746928349710801636","123493121566752873416841338418389708367","227860140695901944075647735040634555442","49167889140887006063066273482780014944"],"threshold":0.9},"target":{"file":"src/libjasper/mif/mif_cod.c"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-f0fc3185","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["118781418663435591297534574039530981456","282709278464126976295879937274698805815","73564437775846331311766964077325400161","269578294379495305112872818501640006233","67278611969438198511992847331659649431","185640989121281719838400695917264131635","94353631153884523040575855112829367267","190060126769912269804453192607720877398","4585271566341077833071705380204764516","310792693037788778538785801105621495445","3370311861208023457742291638195384468","289670789178848249759762250793126081270","330088505705667171627205756027629835715","7846862586085031111260516430635638769","20311042514231014589004445395875983562","104441192166340298598637237881975481736","58577078750014193177816355173738528683","292127617900528554504296081274171397218","216854422662304216648256935264921856850","312384312871654339383211179496187689962","320565324607148281052243464275451119324","51263344885917634625677729068244057253","18305372631034789702726464017049193519","47562246331992039430206516806882989069","121825478212592297147898054224190993181","206441306864078722861517274666431598934","169442562962452880871106529379647723978","292358482166586179602267793520345016333","267687517367667987544318239057133769097","304795417378826862654127374245662191903","96760819426781896257573260708449730903","53716688197851774772108023492670726222"],"threshold":0.9},"target":{"file":"src/libjasper/jp2/jp2_dec.c"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-f364f69b","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["40211291870129934523061123078903885576","196089735426262941644840429258375479751","87462701836986999447562223710710063435","68649054025503256444546125937106796248","17829900006993028092177609583685262664","7167224814044473433401186122166578202","40102559741214224574318510278209076629","90842732473360079742827887169597331532","222491639375303954762545940269489873659","321761978862301153672044892436616401292","256847156147797300291161306150987908919","295382114380906857814063580289086949420","299013146541900088075796092505043397215"],"threshold":0.9},"target":{"file":"src/libjasper/include/jasper/jas_tmr.h"}},{"source":"https://github.com/jasper-software/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a","signature_version":"v1","id":"CVE-2016-9557-f56a3724","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["174151086056280459692190451727435998506","126680310044297359042007010531800919234","118438254704629281767622845014327015716","182192140104649152445065722097935336385","49136454053255793811900168025065399743","258907248671920145960957502246354930595","330347640360737414258016222022256693837","239972152592376417789395543168530974527","97786286969656616812607512091594082992","79419909540523866111713106841112502059","195666722462202161699525219517286407775","240131386663850076934950369819037997775","52754251406941288820738866822108457572","195176162284018664397262129210613209897","29055420839492987305442120669969142105","305647307823307968833771476707150775849","208357504020007007278339161196826508564","123585585773232429041675497538504642223","10123302227282620246562426430301431301","229849279123283080574833479085908625164","240771426952931716231159586177990024021","332640466412529384761652152953774147241","217505754332098099534351914775293637293","66158853860456027729095502990681967093","235840546809454786926592067046920045491","300376924048540939618705465503439596584","142289336429412160382194504804806529564","235556422454084432168584578009844134203","173262809903945044921986509754298594797","81454390863175440632139670786322456122","130103935852515663372049403278740865614","82463703855084580596652561139345681803","234655892626153488780472681023098551767","301901041141877148208982740396191959511","9030302958430582357376205394096256265","15039148003367713831398841694992640222","41772159036379662231615986518290510315","94192689017130062459942674047330251144","34321714549463665003115772855685551398","105718650409410835467380483033311272112","132198653951551705170195117048237906786","144118336650782423875203696708894701978","119153810153986519971324684065009225088","184115028919627353550661744263715273418","204767228140574675083918781771997265033","47932054184478116075129030061180868954","254441558420308266266155236268627268955","31064415180388822097532976706199163803","149514423460319594990585134209863225608","30198587449415991983353796623527076109","20508132273528008490023617615750983427","152300396442547785571459684998633012641","211294052740087460896671224133463630907","155936506672567432949090066113906273207","293300770953916742464381456299936415589","155555427753519961394787538159589007045","302366681017395553467401842633193755267","223254725669372840833799339479881112324","116218208018768623448023616670712667645","178629721711863584360799292775714817700","163497307600655779980443728468196752691","48131365317417963291724935653159688670","246193027453397775874720449634075363275","174307367912920060479145778185589482856","145642168645510270054804860480751979843","335690649424154117880932155258123043859","99501821462779568917605711616939160916"],"threshold":0.9},"target":{"file":"src/libjasper/base/jas_image.c"}}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-9557.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}]}