CVE-2016-10251: Integer overflow in the jpc_pi_nextcprl function in jpc_t2cod.c in JasPer before 1.900.20 allows remote att...

Security readout for executives and security teams

This issue affects JasPer versions before 1.900.20, a library used to process JPEG 2000 images. A specially crafted file can trigger unsafe processing. The public record does not define the impact, so urgency depends on whether your systems process untrusted image files with JasPer. Exposure is most likely on servers, desktops, or applications that use JasPer before 1.900.20 to parse JPEG 2000 or related image files, especially from untrusted users, email, uploads, or automated ingestion pipelines. Set priority after confirming exposure. Internet-facing or user-upload image processing should be handled promptly; systems without JasPer or without untrusted image parsing are lower immediate concern. Mitigation focus: Upgrade JasPer to version 1.900.20 or later where directly managed.; Apply relevant Debian, Red Hat, or Oracle vendor updates where applicable.; Prioritize systems that parse untrusted JPEG 2000 image content..

Prepared

Jun 13, 2026, 06:02 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.