High
Security advisory
An out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper before 2.0.6 when processing crafted input.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2016-9583
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 12:12 UTC · Revision 1
Source evidence
An out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper before 2.0.6 when processing crafted input.
osv:CVE-2016-9583
Complete source record
{
"id": "eb41eeeb057d827bdc4feda62e34be03351a149c4c122ba2fc812417fa023234",
"url": "https://osv.dev/vulnerability/CVE-2016-9583",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2016-9583",
"summary": "An out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper before 2.0.6 when processing crafted input.",
"evidence": "osv:CVE-2016-9583",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2016-9583",
"aliases": [
"CVE-2016-9583"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/jasper-software/jasper",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "be67b65abd0b4727b8b98cc12b59218561aefbba"
},
{
"fixed": "aa0b0f79ade5eef8b0e7a214c03f5af54b36ba7d"
},
{
"fixed": "f25486c3d4aa472fec79150f2c41ed4333395d3d"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:jasper_project:jasper:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "2.0.6"
}
],
"source": "CPE_RANGE"
},
{
"range": [
{
"fixed": "aa0b0f79ade5eef8b0e7a214c03f5af54b36ba7d"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "f25486c3d4aa472fec79150f2c41ed4333395d3d"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"version-2.0.0-beta.1",
"version-1.900.31",
"version-1.900.30",
"version-1.900.29",
"version-1.900.28",
"version-1.900.27",
"version-1.900.26",
"version-1.900.25",
"version-1.900.24",
"version-1.900.23",
"version-1.900.22",
"version-1.900.21",
"version-1.900.20",
"version-1.900.19",
"mdadams-clang-issue",
"version-1.900.18",
"version-1.900.17",
"version-1.900.16",
"version-1.900.15",
"version-1.900.14",
"version-1.900.13",
"version-1.900.12",
"version-1.900.11",
"version-1.900.10",
"version-1.900.9",
"version-1.900.8",
"version-1.900.7",
"version-1.900.6",
"version-1.900.5",
"version-1.900.4",
"version-1.900.3",
"version-1.900.2",
"version-1.900.1"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-9583.json",
"vanir_signatures": [
{
"id": "CVE-2016-9583-1d0fdefb",
"digest": {
"length": 2891,
"function_hash": "229357773841787597542836706636688272757"
},
"source": "https://github.com/jasper-software/jasper/commit/aa0b0f79ade5eef8b0e7a214c03f5af54b36ba7d",
"target": {
"file": "src/libjasper/jpc/jpc_t2cod.c",
"function": "jpc_pi_nextpcrl"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2016-9583-1d59b3e3",
"digest": {
"length": 3126,
"function_hash": "101649940697566588668569505502566673292"
},
"source": "https://github.com/jasper-software/jasper/commit/aa0b0f79ade5eef8b0e7a214c03f5af54b36ba7d",
"target": {
"file": "src/libjasper/jpc/jpc_t2cod.c",
"function": "jpc_pi_nextcprl"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2016-9583-3f3eee64",
"digest": {
"threshold": 0.9,
"line_hashes": [
"76046811373635138994273651784537904216",
"77170917514984923131795498582393752865",
"218161562009849185040788517163987921882",
"71004272932463797870134322351281497816",
"2226618095858842688844805833123569353",
"20291483828154380566995138842762868800",
"10569523255311290312790915988156150105",
"36539532521627043475591919756337940217",
"127118164596308144680491117010486093521",
"319190536247087752243160103132479944052",
"249477897257943548225768957271196638257",
"240097045700587730028063697544631200674",
"244979800254135918839574329475967313372",
"185322458923865332444729054102095226030",
"35258226244143295136488049194658767484",
"31650396589587437552966618962124651297",
"233474337354533259542487654900534703574",
"223131863458772104468468724845052956874",
"224822972969045047794733867040604615592",
"193041954980164523961774389856040052756",
"28358825345365660111249483282297598019",
"26069384087220063771981873251622785268",
"119796533562898460557783589838608270844",
"158332060735659374925163957932980341898",
"234620628400447244415669446557076230338",
"65243341767006019528165532080531137393",
"237406085935926331877091195284126393137",
"325115742102582045224743750880358018022",
"30693029952555506351869170735981832284",
"58822322899139123254992036560551534001",
"247365377581573090869863068759153090052",
"115969653954998056091658806414211171780",
"296448336514631402773126469151012576930",
"129135795651286035458667479568250698108",
"189769777837324779334608856476710820148",
"193867499551659243752650703651699372642",
"331678878903697085981695740848787946950",
"286442901174166503706304758001230656881",
"126368918117204250507362348099073811657",
"43450351916781748864600115559105676038",
"84808611277771588067162670076834869781",
"232923153825435402764618930105086921183",
"297131946601869719730078737913898172633",
"297893218366117645114969153424858743297",
"116076871864862106294029972021273834301",
"19521899503408518769724411958978352234",
"218285233182378092268023131151074716021",
"215605693293663989771846549740939172186",
"224822972969045047794733867040604615592",
"193041954980164523961774389856040052756",
"28358825345365660111249483282297598019",
"26069384087220063771981873251622785268",
"119796533562898460557783589838608270844",
"120891072019545283083375320112444031331",
"234620628400447244415669446557076230338",
"65243341767006019528165532080531137393",
"237406085935926331877091195284126393137",
"58258389114354096853325218832132923895",
"172203641125065899100986598817763413275",
"267610441893230968186412596064076798555",
"188040126486216934775320176351790718958",
"44849565462525075366761066144258810849",
"205602058246656309900046845815445942166",
"323041948791230186137053327575542925283",
"83029025615946028708375845178554425021",
"232923153825435402764618930105086921183",
"297131946601869719730078737913898172633",
"297893218366117645114969153424858743297",
"116076871864862106294029972021273834301",
"19521899503408518769724411958978352234",
"218285233182378092268023131151074716021",
"215605693293663989771846549740939172186",
"224822972969045047794733867040604615592",
"193041954980164523961774389856040052756",
"28358825345365660111249483282297598019",
"266142114665985186365689501811108052109",
"180045520544452117551367598977509781011",
"206958073917133144534949243776140577917",
"214895281256448126239968921802016256430",
"114901085653473573016545794389187582341",
"151635545287270114368360681630776092647",
"274333162242857247856831134286475613054",
"109700637302186618279353669707542644313",
"237406085935926331877091195284126393137",
"325115742102582045224743750880358018022"
]
},
"source": "https://github.com/jasper-software/jasper/commit/aa0b0f79ade5eef8b0e7a214c03f5af54b36ba7d",
"target": {
"file": "src/libjasper/jpc/jpc_t2cod.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2016-9583-ede47ba8",
"digest": {
"length": 2889,
"function_hash": "261215937801547403553902024992116877422"
},
"source": "https://github.com/jasper-software/jasper/commit/aa0b0f79ade5eef8b0e7a214c03f5af54b36ba7d",
"target": {
"file": "src/libjasper/jpc/jpc_t2cod.c",
"function": "jpc_pi_nextrpcl"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-20T13:19:22Z"
}
}
],
"modified": "2026-10-20T13:19:22.033099484Z",
"provider": "osv",
"references": [
"https://access.redhat.com/errata/RHSA-2017:1208",
"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9583",
"https://github.com/mdadams/jasper/commit/aa0b0f79ade5eef8b0e7a214c03f5af54b36ba7d",
"https://github.com/mdadams/jasper/commit/f25486c3d4aa472fec79150f2c41ed4333395d3d",
"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:a:oracle:outside_in_technology:8.5.3:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:outside_in_technology",
"extracted_events": [
{
"range": [
{
"introduced": "8.5.3"
},
{
"last_affected": "8.5.3"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_desktop",
"extracted_events": [
{
"range": [
{
"introduced": "6.0"
},
{
"last_affected": "6.0"
},
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_server",
"extracted_events": [
{
"range": [
{
"introduced": "6.0"
},
{
"last_affected": "6.0"
},
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_server_aus",
"extracted_events": [
{
"range": [
{
"introduced": "7.3"
},
{
"last_affected": "7.3"
},
{
"introduced": "7.4"
},
{
"last_affected": "7.4"
},
{
"introduced": "7.6"
},
{
"last_affected": "7.6"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_server_eus",
"extracted_events": [
{
"range": [
{
"introduced": "7.3"
},
{
"last_affected": "7.3"
},
{
"introduced": "7.4"
},
{
"last_affected": "7.4"
},
{
"introduced": "7.5"
},
{
"last_affected": "7.5"
},
{
"introduced": "7.6"
},
{
"last_affected": "7.6"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_server_tus",
"extracted_events": [
{
"range": [
{
"introduced": "7.3"
},
{
"last_affected": "7.3"
},
{
"introduced": "7.6"
},
{
"last_affected": "7.6"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_workstation",
"extracted_events": [
{
"range": [
{
"introduced": "6.0"
},
{
"last_affected": "6.0"
},
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2016-9583",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 387499,
"published_at": "2018-08-01T17:29:00.297+00:00"
}