cve/2016/CVE-2016-8886.md

CVE-2016-8886

Description

The jas_malloc function in libjasper/base/jas_malloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted file, which triggers a memory allocation failure.

POC

Reference

No PoCs from references.

Github

• https://github.com/ICSE2020-MemLock/MemLock_Benchmark
• https://github.com/SZU-SE/MemLock_Benchmark
• https://github.com/SZU-SE/Uncontrolled-allocation-Fuzzer-TestSuite
• https://github.com/mrash/afl-cve
• https://github.com/tzf-key/MemLock_Benchmark
• https://github.com/tzf-omkey/MemLock_Benchmark
• https://github.com/wcventure/MemLock_Benchmark