The jpcirct and jpciict functions in jpc_mct.c in JasPer before 1.900.14 allow remote attackers to cause a denial of service (assertion failure).
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-9389.json"