JasPer 3.0.6 allows denial of service via a reachable assertion in the function inttobits in libjasper/base/jas_image.c.
Published September 16, 2022.
Jasper Project Jasper