{"id":"CVE-2018-19541","aliases":["DLA-1628-1","EUVD-2018-11230","GHSA-2rx7-vfcv-7r3v","MGASA-2019-0381","SUSE-SU-2019:2512-1","SUSE-SU-2019:2513-1","UBUNTU-CVE-2018-19541","openSUSE-SU-2019:2279-1","openSUSE-SU-2019:2282-1","openSUSE-SU-2024:10869-1"],"status":"published","title":"An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900...","description":"An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16. There is a heap-based buffer over-read of size 8 in the function jas_image_depalettize in libjasper/base/jas_image.c.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.02802,"percentile":0.86591,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-125"],"published":"2018-11-26T03:00:00Z","modified":"2026-10-20T10:48:15Z","affected":[{"source":"osv","ecosystem":"Debian:8","package":"jasper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.900.1-debian1-2.4+deb8u5"}]}],"versions":["1.900.1-debian1-2.4","1.900.1-debian1-2.4+deb8u1","1.900.1-debian1-2.4+deb8u2","1.900.1-debian1-2.4+deb8u3","1.900.1-debian1-2.4+deb8u4"],"bundled":8},{"source":"osv","ecosystem":"Mageia:7","package":"jasper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.14-4.1.mga7"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"jasper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.14-3.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"jasper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.14-3.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"jasper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.14-3.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP1","package":"jasper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.14-3.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"jasper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.900.14-195.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"jasper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.900.14-195.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"jasper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.900.14-195.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"jasper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.900.14-195.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"jasper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.900.1-debian1-2.4","1.900.1-debian1-2.4ubuntu1","1.900.1-debian1-2.4ubuntu1.1","1.900.1-debian1-2.4ubuntu1.2","1.900.1-debian1-2.4ubuntu1.3"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"jasper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.14-lp150.2.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"jasper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.14-lp151.4.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"jasper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.33-1.2"}]}],"bundled":38}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"jasper_project","product":"jasper"},{"vendor":"suse","product":"linux_enterprise_desktop"},{"vendor":"suse","product":"linux_enterprise_server"}],"references":[{"url":"https://lists.debian.org/debian-lts-announce/2019/01/msg00003.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Third Party Advisory","advisory"]},{"url":"https://github.com/mdadams/jasper/issues/182","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00023.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00025.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-19541"},{"url":"https://github.com/advisories/GHSA-2rx7-vfcv-7r3v"},{"url":"https://advisories.mageia.org/MGASA-2019-0381.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25800","tags":["report"]},{"url":"https://lists.opensuse.org/opensuse-updates/2019-10/msg00050.html","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192512-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1117507","tags":["report"]},{"url":"https://bugzilla.suse.com/1117508","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19541","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192513-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1010783","tags":["report"]},{"url":"https://bugzilla.suse.com/1117505","tags":["report"]},{"url":"https://bugzilla.suse.com/1117511","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19542","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2018-19541","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-19541","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UJSNBFOOKYKU7PNNS3PPQY4XHQVUNWER/#UJSNBFOOKYKU7PNNS3PPQY4XHQVUNWER","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IYL4GQHJIENFDBIRS75TWZNNQJSIPMBX/#IYL4GQHJIENFDBIRS75TWZNNQJSIPMBX","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10251","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9262","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9390","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9394","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9557","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9591","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6850","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18873","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20622","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27828","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3272","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-19541","description":"An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16. There is a heap-based buffer over-read of size 8 in the function jas_image_depalettize in libjasper/base/jas_image.c.","status":"published","published":"2018-11-26T03:00:00Z","modified":"2026-10-15T17:39:41.351Z","updated_at":"2026-11-02T14:35:02.966615Z"}],"euvd":[{"id":"EUVD-2018-11230","description":"An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16. There is a heap-based buffer over-read of size 8 in the function jas_image_depalettize in libjasper/base/jas_image.c.","status":"published","published":"2018-11-26T03:00:00Z","modified":"2026-10-15T17:39:41Z","updated_at":"2026-11-02T17:00:11.403253Z"}],"ghsa":[{"id":"GHSA-2rx7-vfcv-7r3v","title":"An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900...","description":"An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16. There is a heap-based buffer over-read of size 8 in the function jas_image_depalettize in libjasper/base/jas_image.c.","status":"published","published":"2022-05-13T01:11:54Z","modified":"2023-02-01T05:03:54Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:50:06.799159Z"}],"nvd":[{"id":"CVE-2018-19541","description":"An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16. There is a heap-based buffer over-read of size 8 in the function jas_image_depalettize in libjasper/base/jas_image.c.","status":"published","published":"2018-11-26T03:29:00.377Z","modified":"2026-10-15T18:17:17.44Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:04:48.987926Z"}],"osv":[{"id":"CVE-2018-19541","description":"An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16. There is a heap-based buffer over-read of size 8 in the function jas_image_depalettize in libjasper/base/jas_image.c.","status":"published","published":"2018-11-26T03:29:00.377Z","modified":"2026-10-20T10:48:15.437962988Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:08.834469Z"},{"id":"UBUNTU-CVE-2018-19541","description":"An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16. There is a heap-based buffer over-read of size 8 in the function jas_image_depalettize in libjasper/base/jas_image.c.","status":"published","published":"2018-11-26T03:29:00Z","modified":"2026-04-22T11:50:22.484268Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:17.496046Z"},{"id":"DLA-1628-1","title":"jasper - security update","status":"published","published":"2019-01-02T00:00:00Z","modified":"2026-03-09T01:01:03.220223Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"MGASA-2019-0381","title":"Updated jasper packages fix security vulnerabilities","description":"Heap based overflow in jas_icctxtdesc_input (CVE-2018-19540).\n\nHeap based overread in jas_image_depalettize (CVE-2018-19541).\n","status":"published","published":"2019-12-13T18:25:24Z","modified":"2026-04-16T04:43:34.079882892Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2019:2279-1","title":"Security update for jasper","description":"This update for jasper fixes the following issues:\n\nSecurity issues fixed: \n\n- CVE-2018-19540: Fixed  a heap based overflow in jas_icctxtdesc_input (bsc#1117508).\n- CVE-2018-19541: Fix heap based overread in jas_image_depalettize (bsc#1117507).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-10-07T14:20:59Z","modified":"2026-02-04T04:06:15.971006Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2019:2282-1","title":"Security update for jasper","description":"This update for jasper fixes the following issues:\n\nSecurity issues fixed: \n\n- CVE-2018-19540: Fixed  a heap based overflow in jas_icctxtdesc_input (bsc#1117508).\n- CVE-2018-19541: Fix heap based overread in jas_image_depalettize (bsc#1117507).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-10-07T14:21:19Z","modified":"2026-02-04T04:17:53.993938Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2024:10869-1","title":"jasper-2.0.33-1.2 on GA media","description":"These are all security issues fixed in the jasper-2.0.33-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:18:39.137926Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2019:2512-1","title":"Security update for jasper","description":"This update for jasper fixes the following issues:\n\nSecurity issues fixed: \n\n- CVE-2018-19540: Fixed  a heap based overflow in jas_icctxtdesc_input (bsc#1117508).\n- CVE-2018-19541: Fix heap based overread in jas_image_depalettize (bsc#1117507).\n","status":"published","published":"2019-10-02T08:48:07Z","modified":"2026-02-04T02:34:42.197151Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:2513-1","title":"Security update for jasper","description":"This update for jasper fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-19540: Fixed  a heap based overflow in jas_icctxtdesc_input (bsc#1117508).\n- CVE-2018-19541: Fix heap based overread in jas_image_depalettize (bsc#1117507).\n- CVE-2018-19542: Fixed a denial of service in jp2_decode (bsc#1117505).\n- CVE-2018-19539: Fixed a denial of service in jas_image_readcmpt (bsc#1117511).\n- CVE-2016-9396: Fixed a denial of service in jpc_cox_getcompparms (bsc#1010783).\n","status":"published","published":"2019-10-02T08:48:34Z","modified":"2025-05-02T04:05:39.7617Z","updated_at":"2026-11-02T15:53:46.44301Z"}]}}