Xiaotong Jiao

**Name of the Vulnerable Software and Affected Versions** JasPer version 3.0.6 **Description** The issue allows for denial of service via a reachable assertion in the function inttobits in libjasper/base/jas image.c. **Recommendations** For JasPer version 3.0.6, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Bento4 version 1.6.0-639 **Description** A heap-based buffer over-read issue exists in the AP4 HvccAtom class. **Recommendations** For Bento4 version 1.6.0-639, at the moment, there is no information about a newer version that contains a fix for this issue.