cve/2018/CVE-2018-9252.md

CVE-2018-9252

Description

JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_abstorelstepsize in libjasper/jpc/jpc_enc.c.

POC

Reference

• https://github.com/mdadams/jasper/issues/173
• https://www.oracle.com/security-alerts/cpuapr2020.html

Github

• https://github.com/andir/nixos-issue-db-example
• https://github.com/xiaoqx/pocs