### [CVE-2016-9591](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9591)
![](https://img.shields.io/static/v1?label=Product&message=jasper&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=2.0.12%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-416&color=brightgreen)

### Description

JasPer before version 2.0.12 is vulnerable to a use-after-free in the way it decodes certain JPEG 2000 image files resulting in a crash on the application using JasPer.

### POC

#### Reference
- https://bugzilla.redhat.com/show_bug.cgi?id=1406405

#### Github
No PoCs found on GitHub currently.