CVE-2017-13745EPSS p90.4%
CVE-2017-13745CVE-2017-13745
jasper_project / jasper
Description
There is a reachable assertion abort in the function jpc_dec_process_sot() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service attack by triggering an unexpected jpc_ppmstabtostreams return value, a different vulnerability than CVE-2018-9154.
Scoring
| CVSS | 7.5 () |
| Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| EPSS | 3.94% probability of exploitation · percentile 90.4% · 2026-11-03T12:00:27Z |
| Last modified | 2026-11-02 |