CVE-2021-26926

A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2_decode...

7.1 HighFix available

A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2_decode function whic may lead to disclosure of information or program crash.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: High
Integrity: None
Availability: High

Exploit likelihood

1.20%Down 0.1 points since Apr 14, 2021

What each source reports

NVD Score used 7.1

A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2_decode function whic may lead to disclosure of information or program crash.

Record: CVE-2021-26926
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
CVSS 2.0: 5.8 MediumAV:N/AC:M/Au:N/C:P/I:N/A:P
Weakness: CWE-125
Updated: 2026-11-02

CVE List No score

A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2_decode function whic may lead to disclosure of information or program crash.

Record: CVE-2021-26926
Weakness: CWE-125
Updated: 2026-11-02

EUVDEUVD-2021-13708 No score

A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2_decode function whic may lead to disclosure of information or program crash.

Record: EUVD-2021-13708
Updated: 2026-11-03

GitHub AdvisoriesGHSA-xx8c-rpq7-pg6p No score

A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2_decode...

A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2_decode function whic may lead to disclosure of information or program crash.

Record: GHSA-xx8c-rpq7-pg6p
Weakness: CWE-125
Updated: 2026-11-02

OSVAZL-6491 7.1

CVE-2021-26926 affecting package jasper for versions less than 2.0.32-2

A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2_decode function whic may lead to disclosure of information or program crash.

Record: AZL-6491
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSV 7.1

A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2_decode function whic may lead to disclosure of information or program crash.

Record: CVE-2021-26926
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
Updated: 2026-11-02

Show 10 moreShow less

OSVRHSA-2021:4235 7.8

Red Hat Security Advisory: jasper security update

Record: RHSA-2021:4235
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2021:4235 7.8

Moderate: jasper security update

JasPer is an implementation of Part 1 of the JPEG 2000 image compression standard.

Security Fix(es):

jasper: Heap-based buffer overflow in cp_create() in jpc_enc.c (CVE-2020-27828)
jasper: Heap-based buffer over-read in jp2_decode() in jp2_dec.c (CVE-2021-3272)
jasper: Out of bounds read in jp2_decode() in jp2_dec.c (CVE-2021-26926)
jasper: NULL pointer dereference in jp2_decode() in jp2_dec.c (CVE-2021-26927)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.5 Release Notes linked from the References section.

Record: RLSA-2021:4235
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2021-26926 7.1

A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2_decode function whic may lead to disclosure of information or program crash.

Record: UBUNTU-CVE-2021-26926
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVALSA-2021:4235 No score

Moderate: jasper security update

JasPer is an implementation of Part 1 of the JPEG 2000 image compression standard.

Security Fix(es):

jasper: Heap-based buffer overflow in cp_create() in jpc_enc.c (CVE-2020-27828)
jasper: Heap-based buffer over-read in jp2_decode() in jp2_dec.c (CVE-2021-3272)
jasper: Out of bounds read in jp2_decode() in jp2_dec.c (CVE-2021-26926)
jasper: NULL pointer dereference in jp2_decode() in jp2_dec.c (CVE-2021-26927)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record: ALSA-2021:4235
Updated: 2026-11-02

OSVCLSA-2026-1776849467 No score

jasper: Fix of 3 CVEs

CVE-2021-26926: prevent out-of-bounds read in jp2_decode by hard-erroring on inconsistent IHDR/BPCC component metadata
CVE-2021-26927: prevent out-of-bounds read in jp2_decode by hard-erroring on inconsistent IHDR/BPCC component metadata
CVE-2021-3272: prevent heap-based buffer over-read in jp2_decode by hard-erroring when the decoder channel count exceeds the image component count

Record: CLSA-2026-1776849467
Updated: 2026-11-02

OSVCLSA-2026-1777456996 No score

jasper: Fix of 2 CVEs

CVE-2021-26926: prevent out-of-bounds read in jp2_decode by hard-erroring on inconsistent IHDR/BPCC component metadata
CVE-2021-26927: prevent out-of-bounds read in jp2_decode by hard-erroring on inconsistent IHDR/BPCC component metadata
CVE-2021-3272: prevent heap-based buffer over-read in jp2_decode by hard-erroring when the decoder channel count exceeds the image component count

Record: CLSA-2026-1777456996
Updated: 2026-11-02

OSVMGASA-2021-0113 No score

Updated jasper packages fix security vulnerability

jp2_decode in jp2/jp2_dec.c in libjasper in JasPer 2.0.24 has a heap-based buffer over-read when there is an invalid relationship between the number of channels and the number of image components (CVE-2021-3272).

A flaw was found in jasper. An out of bounds read issue was found in jp2_decode function which may lead to disclosure of information or program crash (CVE-2021-26926).

A flaw was found in jasper. A null pointer dereference in jp2_decode in jp2_dec.c may lead to program crash and denial of service (CVE-2021-26927).

Record: MGASA-2021-0113
Updated: 2026-11-02

OSVopenSUSE-SU-2024:13389-1 No score

jasper-4.0.0-2.1 on GA media

These are all security issues fixed in the jasper-4.0.0-2.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:13389-1
Updated: 2026-11-02

OSVSUSE-SU-2022:1475-1 No score

Security update for jasper

This update for jasper fixes the following issues:

CVE-2021-3467: Fixed NULL pointer deref in jp2_decode() (bsc#1184757).
CVE-2021-3443: Fixed NULL pointer deref in jp2_decode() (bsc#1184798).
CVE-2021-26927: Fixed NULL pointer deref in jp2_decode() (bsc#1182104).
CVE-2021-26926: Fixed an out of bounds read in jp2_decode() (bsc#1182105).

Record: SUSE-SU-2022:1475-1
Updated: 2026-11-02

OSVSUSE-SU-2022:1479-1 No score

Security update for jasper

This update for jasper fixes the following issues:

CVE-2021-3467: Fixed NULL pointer deref in jp2_decode() (bsc#1184757).
CVE-2021-3443: Fixed NULL pointer deref in jp2_decode() (bsc#1184798).
CVE-2021-26927: Fixed NULL pointer deref in jp2_decode() (bsc#1182104).
CVE-2021-26926: Fixed an out of bounds read in jp2_decode() (bsc#1182105).

Record: SUSE-SU-2022:1479-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`jasper-devel` AlmaLinux:8 From an advisory covering 4 CVEs	before 2.0.14-5.el8	2.0.14-5.el8
`jasper-libs` AlmaLinux:8 From an advisory covering 4 CVEs	before 2.0.14-5.el8	2.0.14-5.el8
`jasper` Azure Linux:2	before 2.0.32-2	2.0.32-2
`jasper` TuxCare:CentOS:7 From an advisory covering 3 CVEs	before 1.900.1-33.el7.tuxcare.els5	1.900.1-33.el7.tuxcare.els5
`jasper-devel` TuxCare:CentOS:7 From an advisory covering 3 CVEs	before 1.900.1-33.el7.tuxcare.els5	1.900.1-33.el7.tuxcare.els5
`jasper-libs` TuxCare:CentOS:7 From an advisory covering 3 CVEs	before 1.900.1-33.el7.tuxcare.els5	1.900.1-33.el7.tuxcare.els5
`jasper-utils` TuxCare:CentOS:7 From an advisory covering 3 CVEs	before 1.900.1-33.el7.tuxcare.els5	1.900.1-33.el7.tuxcare.els5
`jasper` TuxCare:OracleLinux:7 From an advisory covering 3 CVEs	before 1.900.1-33.el7.tuxcare.els5	1.900.1-33.el7.tuxcare.els5
`jasper-devel` TuxCare:OracleLinux:7 From an advisory covering 3 CVEs	before 1.900.1-33.el7.tuxcare.els5	1.900.1-33.el7.tuxcare.els5
`jasper-libs` TuxCare:OracleLinux:7 From an advisory covering 3 CVEs	before 1.900.1-33.el7.tuxcare.els5	1.900.1-33.el7.tuxcare.els5

Show 24 moreShow less

Affected packages
Package	Affected	Fixed
`jasper-utils` TuxCare:OracleLinux:7 From an advisory covering 3 CVEs	before 1.900.1-33.el7.tuxcare.els5	1.900.1-33.el7.tuxcare.els5
`jasper` Mageia:7 From an advisory covering 3 CVEs	before 2.0.25-1.mga7	2.0.25-1.mga7
`jasper` Red Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs	before 0:2.0.14-5.el8	0:2.0.14-5.el8
`jasper-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs	before 0:2.0.14-5.el8	0:2.0.14-5.el8
`jasper-debugsource` Red Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs	before 0:2.0.14-5.el8	0:2.0.14-5.el8
`jasper-libs` Red Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs	before 0:2.0.14-5.el8	0:2.0.14-5.el8
`jasper-libs-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs	before 0:2.0.14-5.el8	0:2.0.14-5.el8
`jasper-utils-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs	before 0:2.0.14-5.el8	0:2.0.14-5.el8
`jasper-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 4 CVEs	before 0:2.0.14-5.el8	0:2.0.14-5.el8
`jasper-debugsource` Red Hat:enterprise_linux:8::crb From an advisory covering 4 CVEs	before 0:2.0.14-5.el8	0:2.0.14-5.el8
`jasper-devel` Red Hat:enterprise_linux:8::crb From an advisory covering 4 CVEs	before 0:2.0.14-5.el8	0:2.0.14-5.el8
`jasper-libs-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 4 CVEs	before 0:2.0.14-5.el8	0:2.0.14-5.el8
`jasper-utils-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 4 CVEs	before 0:2.0.14-5.el8	0:2.0.14-5.el8
`jasper` Rocky Linux:8 From an advisory covering 4 CVEs	before 0:2.0.14-5.el8	0:2.0.14-5.el8
`jasper` SUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 4 CVEs	before 1.900.14-195.31.1	1.900.14-195.31.1
`jasper` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 4 CVEs	before 1.900.14-195.31.1	1.900.14-195.31.1
`jasper` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 4 CVEs	before 1.900.14-195.31.1	1.900.14-195.31.1
`jasper` SUSE:Linux Enterprise Module for Basesystem 15 SP3 From an advisory covering 4 CVEs	before 2.0.14-150000.3.25.1	2.0.14-150000.3.25.1
`jasper` SUSE:Linux Enterprise Module for Desktop Applications 15 SP3 From an advisory covering 4 CVEs	before 2.0.14-150000.3.25.1	2.0.14-150000.3.25.1
`jasper` SUSE:Linux Enterprise Real Time 15 SP2 From an advisory covering 4 CVEs	before 2.0.14-150000.3.25.1	2.0.14-150000.3.25.1
`jasper` openSUSE:Leap 15.3 From an advisory covering 4 CVEs	before 2.0.14-150000.3.25.1	2.0.14-150000.3.25.1
`jasper` openSUSE:Leap 15.4 From an advisory covering 4 CVEs	before 2.0.14-150000.3.25.1	2.0.14-150000.3.25.1
`jasper` Ubuntu:16.04:LTS	All versions, plus listed versions 1.900.1-debian1-2.41.900.1-debian1-2.4ubuntu11.900.1-debian1-2.4ubuntu1.11.900.1-debian1-2.4ubuntu1.21.900.1-debian1-2.4ubuntu1.3	None known
`jasper` openSUSE:Tumbleweed From an advisory covering 5 CVEs	before 4.0.0-2.1	4.0.0-2.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-26926 is a high vulnerability (CVSS 7.1) in Jasper Project Jasper, published February 23, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.20%, the 68th percentile. Fixed in jasper 2.0.32-2.

References

Show 48 moreShow less