Every CVE Search/ Get API key

CVE-2025-8835

JasPer Image Color Space Conversion jas_image.c jas_image_chclrspc null pointer dereference

4.8 MediumFix available

A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jas_image_chclrspc of the file src/libjasper/base/jas_image.c of the component Image Color Space Conversion Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The identifier of the patch is bb7d62bd0a2a8e0e1fdb4d603f3305f955158c52. It is recommended to apply a patch to fix this issue.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
Low

Exploit likelihood

0.24%Up 0.2 points since Aug 11, 2025
90%50%10%1%

What each source reports

CVE List Score used 4.8

JasPer Image Color Space Conversion jas_image.c jas_image_chclrspc null pointer dereference

A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jas_image_chclrspc of the file src/libjasper/base/jas_image.c of the component Image Color Space Conversion Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The identifier of the patch is bb7d62bd0a2a8e0e1fdb4d603f3305f955158c52. It is recommended to apply a patch to fix this issue.

Record
CVE-2025-8835
CVSS 4.0
4.8 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
CVSS 3.1
3.3 LowCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C
CVSS 3.0
3.3 LowCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C
CVSS 2.0
1.7 AV:L/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:OF/RC:C
Weakness
CWE-476, CWE-404
Updated
2026-11-02
EUVDEUVD-2025-24129 4.8

A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jas_image_chclrspc of the file src/libjasper/base/jas_image.c of the component Image Color Space Conversion Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The identifier of the patch is bb7d62bd0a2a8e0e1fdb4d603f3305f955158c52. It is recommended to apply a patch to fix this issue.

Record
EUVD-2025-24129
CVSS 4.0
4.8 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
Updated
2026-11-02
GitHub AdvisoriesGHSA-f4c9-2q5g-hq95 1.9

A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function...

A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jas_image_chclrspc of the file src/libjasper/base/jas_image.c of the component Image Color Space Conversion Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The identifier of the patch is bb7d62bd0a2a8e0e1fdb4d603f3305f955158c52. It is recommended to apply a patch to fix this issue.

Record
GHSA-f4c9-2q5g-hq95
CVSS 4.0
1.9 LowCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
3.3 LowCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Weakness
CWE-404, CWE-476
Updated
2026-11-02
NVD 1.9

A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jas_image_chclrspc of the file src/libjasper/base/jas_image.c of the component Image Color Space Conversion Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The identifier of the patch is bb7d62bd0a2a8e0e1fdb4d603f3305f955158c52. It is recommended to apply a patch to fix this issue.

Record
CVE-2025-8835
CVSS 4.0
1.9 LowCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
3.3 LowCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
1.7 LowAV:L/AC:L/Au:S/C:N/I:N/A:P
Weakness
CWE-404, CWE-476
Updated
2026-11-02
OSV 1.9

JasPer Image Color Space Conversion jas_image.c jas_image_chclrspc null pointer dereference

A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jas_image_chclrspc of the file src/libjasper/base/jas_image.c of the component Image Color Space Conversion Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The identifier of the patch is bb7d62bd0a2a8e0e1fdb4d603f3305f955158c52. It is recommended to apply a patch to fix this issue.

Record
CVE-2025-8835
CVSS 4.0
1.9 LowCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
Weakness
CWE-404, CWE-476
Updated
2026-11-02
OSVUBUNTU-CVE-2025-8835 1.9

A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jas_image_chclrspc of the file src/libjasper/base/jas_image.c of the component Image Color Space Conversion Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The identifier of the patch is bb7d62bd0a2a8e0e1fdb4d603f3305f955158c52. It is recommended to apply a patch to fix this issue.

Record
UBUNTU-CVE-2025-8835
CVSS 4.0
1.9 LowCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1
3.3 LowCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
Show 7 moreShow less
OSVAZL-66162 No score

CVE-2025-8835 affecting package jasper for versions less than 4.2.1-3

A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jas_image_chclrspc of the file src/libjasper/base/jas_image.c of the component Image Color Space Conversion Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The identifier of the patch is bb7d62bd0a2a8e0e1fdb4d603f3305f955158c52. It is recommended to apply a patch to fix this issue.

Record
AZL-66162
Updated
2026-11-05
OSVopenSUSE-SU-2025:15447-1 No score

jasper-4.2.8-2.1 on GA media

These are all security issues fixed in the jasper-4.2.8-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15447-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:20138-1 No score

Security update for jasper

This update for jasper fixes the following issues:

Update to 4.2.8:

  • CVE-2025-8837: Fixed a bug in the JPC decoder that could cause bad memory accesses if the debug level is set sufficiently high (bsc#1247901).
  • CVE-2025-8836: Added some missing range checking on several coding parameters in the JPC encoder (bsc#1247902).
  • CVE-2025-8835: Added a check for a missing color component in the jas_image_chclrspc function (bsc#1247904).
Record
openSUSE-SU-2026:20138-1
Updated
2026-11-02
OSVSUSE-SU-2025:03219-1 No score

Security update for jasper

This update for jasper fixes the following issues:

  • CVE-2025-8835: missing range check in the JPEG-2000 (JPC) Encoder leads to assertion failure and crash when processing a malformed JPEG2000 image with an invalid cblkwidth parameter (bsc#1247904).
  • CVE-2025-8836: out-of-bounds array indexing in function jas_image_chclrspc leads to crash when processing a malformed image file with BMP output format and color space conversion (bsc#1247902).
  • CVE-2025-8837: missing operations in cleanup code of the JPEG-2000 (JPC) Encoder leads to use-after-free when processing malformed JPEG2000 images with certain debug levels enabled (bsc#1247901).
Record
SUSE-SU-2025:03219-1
Updated
2026-11-02
OSVSUSE-SU-2025:03367-1 No score

Security update for jasper

This update for jasper fixes the following issues:

  • CVE-2025-8835: missing range check in the JPEG-2000 (JPC) Encoder leads to assertion failure and crash when processing a malformed JPEG2000 image with an invalid cblkwidth parameter (bsc#1247904).
  • CVE-2025-8836: out-of-bounds array indexing in function jas_image_chclrspc leads to crash when processing a malformed image file with BMP output format and color space conversion (bsc#1247902).
  • CVE-2025-8837: missing operations in cleanup code of the JPEG-2000 (JPC) Encoder leads to use-after-free when processing malformed JPEG2000 images with certain debug levels enabled (bsc#1247901).
Record
SUSE-SU-2025:03367-1
Updated
2026-11-02
OSVSUSE-SU-2025:3947-1 No score

Security update for jasper

This update for jasper fixes the following issues:

  • Update to 4.2.8:

  • CVE-2025-8837: Fixed a bug in the JPC decoder that could cause bad memory accesses if the debug level is set sufficiently high (bsc#1247901).

  • CVE-2025-8836: Added some missing range checking on several coding parameters in the JPC encoder (bsc#1247902).

  • CVE-2025-8835: Added a check for a missing color component in the jas_image_chclrspc function (bsc#1247904).

  • CVE-2023-51257: Fixed invalid memory write bug (bsc#1218802).

Record
SUSE-SU-2025:3947-1
Updated
2026-11-02
OSVSUSE-SU-2026:20200-1 No score

Security update for jasper

This update for jasper fixes the following issues:

Update to 4.2.8:

  • CVE-2025-8837: Fixed a bug in the JPC decoder that could cause bad memory accesses if the debug level is set sufficiently high (bsc#1247901).
  • CVE-2025-8836: Added some missing range checking on several coding parameters in the JPC encoder (bsc#1247902).
  • CVE-2025-8835: Added a check for a missing color component in the jas_image_chclrspc function (bsc#1247904).
Record
SUSE-SU-2026:20200-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
jasper
Azure Linux:3
 before 4.2.1-3
4.2.1-3
jasper
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 3 CVEs
 before 2.0.14-150000.3.37.1
2.0.14-150000.3.37.1
jasper
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 3 CVEs
 before 2.0.14-150000.3.37.1
2.0.14-150000.3.37.1
jasper
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 3 CVEs
 before 1.900.14-195.43.1
1.900.14-195.43.1
jasper
SUSE:Linux Enterprise Module for Desktop Applications 15 SP6
From an advisory covering 4 CVEs
 before 4.2.8-150600.4.5.1
4.2.8-150600.4.5.1
jasper
SUSE:Linux Enterprise Module for Desktop Applications 15 SP7
From an advisory covering 4 CVEs
 before 4.2.8-150600.4.5.1
4.2.8-150600.4.5.1
jasper
openSUSE:Leap 15.6
From an advisory covering 4 CVEs
 before 4.2.8-150600.4.5.1
4.2.8-150600.4.5.1
jasper
SUSE:Linux Enterprise Server 16.0
From an advisory covering 3 CVEs
 before 4.2.8-160000.1.1
4.2.8-160000.1.1
jasper
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 3 CVEs
 before 4.2.8-160000.1.1
4.2.8-160000.1.1
jasper
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.900.1-debian1-2.41.900.1-debian1-2.4ubuntu11.900.1-debian1-2.4ubuntu1.11.900.1-debian1-2.4ubuntu1.21.900.1-debian1-2.4ubuntu1.3
 None known
jasper
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
 before 4.2.8-2.1
4.2.8-2.1
jasper
openSUSE:Leap 16.0
From an advisory covering 3 CVEs
 before 4.2.8-160000.1.1
4.2.8-160000.1.1

History

History
RecordedChangedSources
affected
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-8835 is a medium vulnerability (CVSS 4.8) in Jasper Project Jasper, published August 11, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 15th percentile. Fixed in jasper 4.2.1-3.

References

Show 17 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open