JasPer before version 2.0.12 is vulnerable to a use-after-free in the way it decodes certain JPEG 2000 image files resulting in a crash on the application using JasPer.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-9591.json"