diff -rupN --no-dereference jasper-2.0.14/src/libjasper/jpc/jpc_cs.c jasper-2.0.14-new/src/libjasper/jpc/jpc_cs.c
--- jasper-2.0.14/src/libjasper/jpc/jpc_cs.c	2017-09-15 01:20:10.000000000 +0200
+++ jasper-2.0.14-new/src/libjasper/jpc/jpc_cs.c	2019-08-28 19:08:56.070713641 +0200
@@ -795,6 +795,9 @@ static int jpc_cox_getcompparms(jpc_ms_t
 	if (compparms->numdlvls > 32) {
 		goto error;
 	}
+	if (compparms->qmfbid != JPC_COX_INS &&
+	    compparms->qmfbid != JPC_COX_RFT)
+		goto error;
 	compparms->numrlvls = compparms->numdlvls + 1;
 	if (compparms->numrlvls > JPC_MAXRLVLS) {
 		goto error;