CVE-2016-8886 on Ubuntu 12.04 LTS (precise) - low.
Description:
The jas_malloc function in libjasper/base/jas_malloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted file, which triggers a memory allocation failure.