{"id":"CVE-2016-9583","details":"An out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper before 2.0.6 when processing crafted input.","modified":"2026-07-08T22:49:04.276Z","published":"2018-08-01T17:29:00.297Z","related":["SUSE-SU-2017:0946-1","SUSE-SU-2017:0953-1","openSUSE-SU-2024:10869-1"],"database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:a:oracle:outside_in_technology:8.5.3:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.5.3"},{"last_affected":"8.5.3"}],"source":"CPE_STRING","vendor_product":"oracle:outside_in_technology"},{"extracted_events":[{"introduced":"6.0"},{"last_affected":"6.0"},{"introduced":"7.0"},{"last_affected":"7.0"}],"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux_desktop","cpes":["cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*"]},{"vendor_product":"redhat:enterprise_linux_server","cpes":["cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"6.0"},{"last_affected":"6.0"},{"introduced":"7.0"},{"last_affected":"7.0"}],"source":"CPE_STRING"},{"extracted_events":[{"introduced":"7.3"},{"last_affected":"7.3"},{"introduced":"7.4"},{"last_affected":"7.4"},{"introduced":"7.6"},{"last_affected":"7.6"}],"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux_server_aus","cpes":["cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*"]},{"vendor_product":"redhat:enterprise_linux_server_eus","cpes":["cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.3"},{"last_affected":"7.3"},{"introduced":"7.4"},{"last_affected":"7.4"},{"introduced":"7.5"},{"last_affected":"7.5"},{"introduced":"7.6"},{"last_affected":"7.6"}],"source":"CPE_STRING"},{"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux_server_tus","cpes":["cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.3"},{"last_affected":"7.3"},{"introduced":"7.6"},{"last_affected":"7.6"}]},{"vendor_product":"redhat:enterprise_linux_workstation","cpes":["cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"6.0"},{"last_affected":"6.0"},{"introduced":"7.0"},{"last_affected":"7.0"}],"source":"CPE_STRING"}]},"references":[{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/94925"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2017:1208"},{"type":"FIX","url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9583"},{"type":"FIX","url":"https://github.com/mdadams/jasper/commit/aa0b0f79ade5eef8b0e7a214c03f5af54b36ba7d"},{"type":"FIX","url":"https://github.com/mdadams/jasper/commit/f25486c3d4aa472fec79150f2c41ed4333395d3d"},{"type":"FIX","url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/jasper-software/jasper","events":[{"introduced":"0"},{"fixed":"be67b65abd0b4727b8b98cc12b59218561aefbba"},{"fixed":"aa0b0f79ade5eef8b0e7a214c03f5af54b36ba7d"},{"fixed":"f25486c3d4aa472fec79150f2c41ed4333395d3d"}],"database_specific":{"cpe":"cpe:2.3:a:jasper_project:jasper:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"2.0.6"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["version-2.0.5","version-2.0.4","version-2.0.3","version-2.0.2","version-2.0.1","version-2.0.0","version-2.0.0-beta.2","version-2.0.0-beta.1","version-1.900.31","version-1.900.30","version-1.900.29","version-1.900.28","version-1.900.27","version-1.900.26","version-1.900.25","version-1.900.24","version-1.900.23","version-1.900.22","version-1.900.21","version-1.900.20","version-1.900.19","mdadams-clang-issue","version-1.900.18","version-1.900.17","version-1.900.16","version-1.900.15","version-1.900.14","version-1.900.13","version-1.900.12","version-1.900.11","version-1.900.10","version-1.900.9","version-1.900.8","version-1.900.7","version-1.900.6","version-1.900.5","version-1.900.4","version-1.900.3","version-1.900.2","version-1.900.1"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-9583.json","vanir_signatures_modified":"2026-07-08T22:49:04Z","vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"229357773841787597542836706636688272757","length":2891},"id":"CVE-2016-9583-1d0fdefb","signature_type":"Function","signature_version":"v1","source":"https://github.com/jasper-software/jasper/commit/aa0b0f79ade5eef8b0e7a214c03f5af54b36ba7d","target":{"file":"src/libjasper/jpc/jpc_t2cod.c","function":"jpc_pi_nextpcrl"}},{"signature_version":"v1","source":"https://github.com/jasper-software/jasper/commit/aa0b0f79ade5eef8b0e7a214c03f5af54b36ba7d","target":{"file":"src/libjasper/jpc/jpc_t2cod.c","function":"jpc_pi_nextcprl"},"deprecated":false,"digest":{"function_hash":"101649940697566588668569505502566673292","length":3126},"id":"CVE-2016-9583-1d59b3e3","signature_type":"Function"},{"source":"https://github.com/jasper-software/jasper/commit/aa0b0f79ade5eef8b0e7a214c03f5af54b36ba7d","target":{"file":"src/libjasper/jpc/jpc_t2cod.c"},"deprecated":false,"digest":{"line_hashes":["76046811373635138994273651784537904216","77170917514984923131795498582393752865","218161562009849185040788517163987921882","71004272932463797870134322351281497816","2226618095858842688844805833123569353","20291483828154380566995138842762868800","10569523255311290312790915988156150105","36539532521627043475591919756337940217","127118164596308144680491117010486093521","319190536247087752243160103132479944052","249477897257943548225768957271196638257","240097045700587730028063697544631200674","244979800254135918839574329475967313372","185322458923865332444729054102095226030","35258226244143295136488049194658767484","31650396589587437552966618962124651297","233474337354533259542487654900534703574","223131863458772104468468724845052956874","224822972969045047794733867040604615592","193041954980164523961774389856040052756","28358825345365660111249483282297598019","26069384087220063771981873251622785268","119796533562898460557783589838608270844","158332060735659374925163957932980341898","234620628400447244415669446557076230338","65243341767006019528165532080531137393","237406085935926331877091195284126393137","325115742102582045224743750880358018022","30693029952555506351869170735981832284","58822322899139123254992036560551534001","247365377581573090869863068759153090052","115969653954998056091658806414211171780","296448336514631402773126469151012576930","129135795651286035458667479568250698108","189769777837324779334608856476710820148","193867499551659243752650703651699372642","331678878903697085981695740848787946950","286442901174166503706304758001230656881","126368918117204250507362348099073811657","43450351916781748864600115559105676038","84808611277771588067162670076834869781","232923153825435402764618930105086921183","297131946601869719730078737913898172633","297893218366117645114969153424858743297","116076871864862106294029972021273834301","19521899503408518769724411958978352234","218285233182378092268023131151074716021","215605693293663989771846549740939172186","224822972969045047794733867040604615592","193041954980164523961774389856040052756","28358825345365660111249483282297598019","26069384087220063771981873251622785268","119796533562898460557783589838608270844","120891072019545283083375320112444031331","234620628400447244415669446557076230338","65243341767006019528165532080531137393","237406085935926331877091195284126393137","58258389114354096853325218832132923895","172203641125065899100986598817763413275","267610441893230968186412596064076798555","188040126486216934775320176351790718958","44849565462525075366761066144258810849","205602058246656309900046845815445942166","323041948791230186137053327575542925283","83029025615946028708375845178554425021","232923153825435402764618930105086921183","297131946601869719730078737913898172633","297893218366117645114969153424858743297","116076871864862106294029972021273834301","19521899503408518769724411958978352234","218285233182378092268023131151074716021","215605693293663989771846549740939172186","224822972969045047794733867040604615592","193041954980164523961774389856040052756","28358825345365660111249483282297598019","266142114665985186365689501811108052109","180045520544452117551367598977509781011","206958073917133144534949243776140577917","214895281256448126239968921802016256430","114901085653473573016545794389187582341","151635545287270114368360681630776092647","274333162242857247856831134286475613054","109700637302186618279353669707542644313","237406085935926331877091195284126393137","325115742102582045224743750880358018022"],"threshold":0.9},"id":"CVE-2016-9583-3f3eee64","signature_type":"Line","signature_version":"v1"},{"id":"CVE-2016-9583-ede47ba8","signature_type":"Function","signature_version":"v1","source":"https://github.com/jasper-software/jasper/commit/aa0b0f79ade5eef8b0e7a214c03f5af54b36ba7d","target":{"file":"src/libjasper/jpc/jpc_t2cod.c","function":"jpc_pi_nextrpcl"},"deprecated":false,"digest":{"function_hash":"261215937801547403553902024992116877422","length":2889}}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}