CVE-2018-9154

CVE-2018-9154 describes a remote denial-of-service vulnerability in JasPer 2.0.14, specifically within the jpc_dec_process_sot function in libjasper/jpc/jpc_dec.c. This flaw allows an attacker to trigger an unexpected jas_alloc2 return value, leading to an application abort. With a CVSS score of 7.5 (High), the vulnerability is easily exploitable over the network without user interaction and results in a complete loss of availability. There is currently no evidence of active exploitation, nor are there publicly available exploit modules or significant community discussion surrounding this CVE.