CVE-2021-27845
A Divide-by-zero vulnerability exists in JasPer Image Coding Toolkit 2.0 in jasper/src/libjasper...
A Divide-by-zero vulnerability exists in JasPer Image Coding Toolkit 2.0 in jasper/src/libjasper/jpc/jpc_enc.c
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
A Divide-by-zero vulnerability exists in JasPer Image Coding Toolkit 2.0 in jasper/src/libjasper/jpc/jpc_enc.c
- Record
CVE-2021-27845- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-369
- Updated
- 2026-11-02
CVE List No score
A Divide-by-zero vulnerability exists in JasPer Image Coding Toolkit 2.0 in jasper/src/libjasper/jpc/jpc_enc.c
- Record
CVE-2021-27845- Updated
- 2026-11-02
EUVDEUVD-2021-14584 No score
A Divide-by-zero vulnerability exists in JasPer Image Coding Toolkit 2.0 in jasper/src/libjasper/jpc/jpc_enc.c
- Record
EUVD-2021-14584- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6xx8-4xh5-jh9w No score
A Divide-by-zero vulnerability exists in JasPer Image Coding Toolkit 2.0 in jasper/src/libjasper...
A Divide-by-zero vulnerability exists in JasPer Image Coding Toolkit 2.0 in jasper/src/libjasper/jpc/jpc_enc.c
- Record
GHSA-6xx8-4xh5-jh9w- Weakness
- CWE-369
- Updated
- 2026-11-02
OSV
A Divide-by-zero vulnerability exists in JasPer Image Coding Toolkit 2.0 in jasper/src/libjasper/jpc/jpc_enc.c
- Record
CVE-2021-27845- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2021-1347
jasper security update
The JasPer Project is an open-source initiative to provide a free software-based reference implementation of the codec specified in the JPEG-2000 Part-1 standard.
Security Fix(es):
A Divide-by-zero vulnerability exists in JasPer Image Coding Toolkit 2.0 in jasper/src/libjasper/jpc/jpc_enc.c(CVE-2021-27845)
- Record
OESA-2021-1347- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 6 moreShow less
OSVUBUNTU-CVE-2021-27845
A Divide-by-zero vulnerability exists in JasPer Image Coding Toolkit 2.0 in jasper/src/libjasper/jpc/jpc_enc.c
- Record
UBUNTU-CVE-2021-27845- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2022:0562-1 No score
Security update for jasper
This update for jasper fixes the following issues:
- CVE-2021-27845: Fixed divide-by-zery issue in cp_create() (bsc#1188437).
- Record
openSUSE-SU-2022:0562-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:13389-1 No score
jasper-4.0.0-2.1 on GA media
These are all security issues fixed in the jasper-4.0.0-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:13389-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:0561-1 No score
Security update for jasper
This update for jasper fixes the following issues:
- CVE-2021-27845: Fixed divide-by-zery issue in cp_create() (bsc#1188437).
- Record
SUSE-SU-2022:0561-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:0562-1 No score
Security update for jasper
This update for jasper fixes the following issues:
- CVE-2021-27845: Fixed divide-by-zery issue in cp_create() (bsc#1188437).
- Record
SUSE-SU-2022:0562-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:0562-2 No score
Security update for jasper
This update for jasper fixes the following issues:
- CVE-2021-27845: Fixed divide-by-zery issue in cp_create() (bsc#1188437).
- Record
SUSE-SU-2022:0562-2- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
jasperopenEuler:20.03-LTS-SP2 |
before 2.0.14-10.oe1 | 2.0.14-10.oe1 |
jasperSUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 1.900.14-195.28.1 | 1.900.14-195.28.1 |
jasperSUSE:Linux Enterprise Server 12 SP5 |
before 1.900.14-195.28.1 | 1.900.14-195.28.1 |
jasperSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 1.900.14-195.28.1 | 1.900.14-195.28.1 |
jasperSUSE:Linux Enterprise Module for Basesystem 15 SP3 |
before 2.0.14-3.22.1 | 2.0.14-3.22.1 |
jasperSUSE:Linux Enterprise Module for Desktop Applications 15 SP3 |
before 2.0.14-3.22.1 | 2.0.14-3.22.1 |
jasperSUSE:Linux Enterprise Real Time 15 SP2 |
before 2.0.14-3.22.1 | 2.0.14-3.22.1 |
jasperSUSE:Linux Enterprise Module for Basesystem 15 SP4 |
before 2.0.14-3.22.1 | 2.0.14-3.22.1 |
jasperSUSE:Linux Enterprise Module for Desktop Applications 15 SP4 |
before 2.0.14-3.22.1 | 2.0.14-3.22.1 |
jasperSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS |
before 2.0.14-3.22.1 | 2.0.14-3.22.1 |
Show 10 moreShow less
| Package | Affected | Fixed |
|---|---|---|
jasperSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS |
before 2.0.14-3.22.1 | 2.0.14-3.22.1 |
jasperSUSE:Linux Enterprise Server 15 SP1-LTSS |
before 2.0.14-3.22.1 | 2.0.14-3.22.1 |
jasperSUSE:Linux Enterprise Server 15 SP2-LTSS |
before 2.0.14-3.22.1 | 2.0.14-3.22.1 |
jasperSUSE:Linux Enterprise Server for SAP Applications 15 SP1 |
before 2.0.14-3.22.1 | 2.0.14-3.22.1 |
jasperSUSE:Linux Enterprise Server for SAP Applications 15 SP2 |
before 2.0.14-3.22.1 | 2.0.14-3.22.1 |
jasperSUSE:Enterprise Storage 6 |
before 2.0.14-3.22.1 | 2.0.14-3.22.1 |
jasperSUSE:Enterprise Storage 7 |
before 2.0.14-3.22.1 | 2.0.14-3.22.1 |
jasperUbuntu:16.04:LTS |
All versions, plus listed versions 1.900.1-debian1-2.41.900.1-debian1-2.4ubuntu11.900.1-debian1-2.4ubuntu1.11.900.1-debian1-2.4ubuntu1.21.900.1-debian1-2.4ubuntu1.3 |
None known |
jasperopenSUSE:Leap 15.3 |
before 2.0.14-3.22.1 | 2.0.14-3.22.1 |
jasperopenSUSE:Tumbleweed From an advisory covering 5 CVEs |
before 4.0.0-2.1 | 4.0.0-2.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-27845 is a medium vulnerability (CVSS 5.5) in Jasper Project Jasper, published July 15, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.65%, the 51st percentile. Fixed in jasper 2.0.14-10.oe1.
References
github.com/jasper-software/jasper/issues/194
nvd.nist.gov/vuln/detail/CVE-2021-27845
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1347
suse.com/support/update/announcement/2022/suse-su-20220561-1
bugzilla.suse.com/1188437
Show 10 moreShow less
ubuntu.com/security/CVE-2021-27845
cve.org/CVERecord?id=CVE-2021-27845
lists.opensuse.org/archives/list/[email protected]/thread/S5RBUBOWU2ZWM5DFWVKEIL4FWPETOKDU