CVE-2015-8751

Integer overflow in the jas_matrix_create function in JasPer allows context-dependent attackers to have unspecified impact via a crafted JPEG 2000 image, related to integer multiplication for memory allocation.

• CWE-190

• http://www.openwall.com/lists/oss-security/2016/01/07/10Exploit, Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/01/08/2Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/01/11/3Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/80035Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1294039Exploit, Issue Tracking, Third Party Advisory
• https://lists.apache.org/thread.html/re28d4c3c5b77138de47bf5b2ad04886d9104eb74ae3594e5f7254318%40%3Cdev.tomcat.apache.org%3EMailing List, Vendor Advisory
• https://lists.apache.org/thread.html/rf15130c7b5f703664ce57a97934ffb8cc6065cbb1bf678dca8651519%40%3Cdev.tomcat.apache.org%3EMailing List, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2016/01/07/10Exploit, Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/01/08/2Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/01/11/3Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/80035Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1294039Exploit, Issue Tracking, Third Party Advisory
• https://lists.apache.org/thread.html/re28d4c3c5b77138de47bf5b2ad04886d9104eb74ae3594e5f7254318%40%3Cdev.tomcat.apache.org%3EMailing List, Vendor Advisory
• https://lists.apache.org/thread.html/rf15130c7b5f703664ce57a97934ffb8cc6065cbb1bf678dca8651519%40%3Cdev.tomcat.apache.org%3EMailing List, Vendor Advisory

Published

Feb 17, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-8745QEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravi…5.5
• CVE-2015-8746fs/nfs/nfs4proc.c in the NFS client in the Linux kernel befo…
• CVE-2015-8747The multifilesystem storage backend in Radicale before 1.1 a…
• CVE-2015-8748Radicale before 1.1 allows remote authenticated users to byp…
• CVE-2015-8749The volume_utils._parse_volume_info function in OpenStack Co…
• CVE-2015-8750libdwarf 20151114 and earlier allows remote attackers to cau…6.5
• CVE-2015-8752Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-8753SAP Afaria 7.0.6001.5 allows remote attackers to bypass auth…
• CVE-2015-8754The Mollom module 6.x-2.7 before 6.x-2.15 for Drupal allows …
• CVE-2015-8755Multiple cross-site scripting (XSS) vulnerabilities in unspe…
• CVE-2015-8756Cross-site scripting (XSS) vulnerability in the search resul…
• CVE-2015-8757Cross-site scripting (XSS) vulnerability in the Extension Ma…