Jasper Project vulnerabilities

Products

• Jasper 102

Newest

• jasper project jasper JasPer JPEG2000 File jpc_dec.c jpc_dec_dump use after free CVE-2025-8837 Fix available 4.8 MediumAugust 11, 2025
• jasper project jasper JasPer JPEG2000 Encoder jpc_enc.c jpc_floorlog2 assertion CVE-2025-8836 Fix available 4.8 MediumAugust 11, 2025
• jasper project jasper JasPer Image Color Space Conversion jas_image.c jas_image_chclrspc null pointer dereference CVE-2025-8835 Fix available 4.8 MediumAugust 11, 2025
• jasper project jasper In Jasper 4.2.2, the jpc_streamlist_remove function in src/libjasper/jpc/jpc_dec.c:2407 has an... CVE-2024-31744 Fix available 7.5 HighApril 19, 2024
• jasper project jasper An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local... CVE-2023-51257 Fix available 7.8 HighJanuary 16, 2024
• jasper project jasper, fedoraproject fedora, redhat enterprise linux +2 more A vulnerability found in jasper. This security vulnerability happens because of a memory leak bug... CVE-2022-2963 Fix available 7.5 HighOctober 14, 2022
• jasper project jasper JasPer 3.0.6 allows denial of service via a reachable assertion in the function inttobits in... CVE-2022-40755 Fix available 5.5 MediumSeptember 16, 2022
• jasper project jasper A Divide-by-zero vulnerability exists in JasPer Image Coding Toolkit 2.0 in jasper/src/libjasper... CVE-2021-27845 Fix available 5.5 MediumJuly 15, 2021
• jasper project jasper, fedoraproject fedora +1 more A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.26 handled... CVE-2021-3467 Fix available 5.5 MediumMarch 25, 2021
• jasper project jasper, fedoraproject fedora, redhat enterprise linux +2 more A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.27 handled... CVE-2021-3443 Fix available 5.5 MediumMarch 25, 2021
• jasper project jasper, fedoraproject fedora +1 more A flaw was found in jasper before 2.0.25. A null pointer dereference in jp2_decode in jp2_dec.c... CVE-2021-26927 Fix available 5.5 MediumFebruary 23, 2021
• jasper project jasper, fedoraproject fedora +1 more A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2_decode... CVE-2021-26926 Fix available 7.1 HighFebruary 23, 2021
• jasper project jasper, fedoraproject fedora +1 more jp2_decode in jp2/jp2_dec.c in libjasper in JasPer 2.0.24 has a heap-based buffer over-read when... CVE-2021-3272 Fix available 5.5 MediumJanuary 27, 2021
• jasper project jasper, fedoraproject fedora +1 more There's a flaw in jasper's jpc encoder in versions prior to 2.0.23. Crafted input provided to... CVE-2020-27828 Fix available 7.8 HighDecember 11, 2020
• jasper project jasper Integer overflow in the jas_matrix_create function in JasPer allows context-dependent attackers... CVE-2015-8751 8.8 HighFebruary 17, 2020
• flif, jasper project jasper +1 more The read_chunk function in flif-dec.cpp in Free Lossless Image Format (FLIF) 0.3 allows remote... CVE-2017-14232 5.5 MediumAugust 15, 2019
• jasper project jasper, debian linux +1 more JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when "--output-format jp2" is... CVE-2018-20622 6.5 MediumDecember 31, 2018
• jasper project jasper, debian linux, oracle outside in technology +2 more JasPer 2.0.14 allows remote attackers to cause a denial of service (application hang) via an... CVE-2018-20584 6.5 MediumDecember 30, 2018
• jasper project jasper, debian linux +1 more jp2_encode in jp2/jp2_enc.c in JasPer 2.0.14 has a heap-based buffer over-read. CVE-2018-20570 6.5 MediumDecember 28, 2018
• jasper project jasper, canonical ubuntu linux, debian linux +2 more +4 more An issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the... CVE-2018-19543 7.8 HighNovember 26, 2018
• jasper project jasper, canonical ubuntu linux, debian linux +3 more +5 more An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function... CVE-2018-19542 Fix available 6.5 MediumNovember 26, 2018
• jasper project jasper, canonical ubuntu linux, debian linux +2 more +4 more An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900... CVE-2018-19541 8.8 HighNovember 26, 2018
• jasper project jasper, debian linux, suse linux enterprise desktop +1 more +3 more An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900... CVE-2018-19540 8.8 HighNovember 26, 2018
• jasper project jasper, debian linux, opensuse leap +2 more +4 more An issue was discovered in JasPer 2.0.14. There is an access violation in the function... CVE-2018-19539 6.5 MediumNovember 26, 2018
• jasper project jasper, debian linux, redhat fedora +2 more An issue has been found in JasPer 2.0.14. There is a memory leak in jas_malloc.c when called from... CVE-2018-19139 5.5 MediumNovember 9, 2018
• jasper project jasper, canonical ubuntu linux, debian linux +2 more +4 more An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function... CVE-2018-18873 Fix available 5.5 MediumOctober 31, 2018
• jasper project jasper There is a reachable abort in the function jpc_dec_process_sot in libjasper/jpc/jpc_dec.c of... CVE-2018-9154 Fix available 7.5 HighMay 4, 2018
• jasper project jasper JasPer 2.0.14 allows denial of service via a reachable assertion in the function... CVE-2018-9252 6.5 MediumApril 4, 2018
• jasper project jasper JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_firstone in... CVE-2018-9055 Fix available 5.5 MediumMarch 27, 2018
• jasper project jasper There is an infinite loop in the jpc_dec_tileinit function in jpc/jpc_dec.c of Jasper 2.0.13. It... CVE-2017-14229 7.5 HighSeptember 9, 2017
• jasper project jasper, debian linux +1 more JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1... CVE-2017-14132 6.5 MediumSeptember 4, 2017
• jasper project jasper, fedoraproject fedora +1 more There is a reachable assertion abort in the function jpc_dequantize() in jpc/jpc_dec.c in JasPer... CVE-2017-13752 7.5 HighAugust 29, 2017
• jasper project jasper, fedoraproject fedora +1 more There is a reachable assertion abort in the function calcstepsizes() in jpc/jpc_dec.c in JasPer 2... CVE-2017-13751 7.5 HighAugust 29, 2017
• jasper project jasper, fedoraproject fedora +1 more There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1296... CVE-2017-13750 7.5 HighAugust 29, 2017
• jasper project jasper, fedoraproject fedora +1 more There is a reachable assertion abort in the function jpc_pi_nextrpcl() in jpc/jpc_t2cod.c in... CVE-2017-13749 7.5 HighAugust 29, 2017
• jasper project jasper, debian linux, fedoraproject fedora +2 more There are lots of memory leaks in JasPer 2.0.12, triggered in the function jas_strdup() in base... CVE-2017-13748 7.5 HighAugust 29, 2017
• jasper project jasper, fedoraproject fedora +1 more There is a reachable assertion abort in the function jpc_floorlog2() in jpc/jpc_math.c in JasPer... CVE-2017-13747 7.5 HighAugust 29, 2017
• jasper project jasper, fedoraproject fedora +1 more There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1297... CVE-2017-13746 7.5 HighAugust 29, 2017
• jasper project jasper There is a reachable assertion abort in the function jpc_dec_process_sot() in jpc/jpc_dec.c in... CVE-2017-13745 7.5 HighAugust 29, 2017
• jasper project jasper, canonical ubuntu linux, fedoraproject fedora +3 more +5 more JasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2_encode which failed... CVE-2017-1000050 Fix available 7.5 HighJuly 13, 2017
• jasper project jasper JasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based buffer over-read... CVE-2017-9782 Fix available 5.5 MediumJune 21, 2017
• jasper, canonical ubuntu linux, redhat enterprise linux desktop +5 more +7 more JasPer before version 2.0.10 is vulnerable to a null pointer dereference was found in the decoded... CVE-2016-9600 Fix available 6.5 MediumApril 5, 2017
• jasper project jasper, oracle outside in technology, redhat enterprise linux desktop +5 more +7 more An out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper... CVE-2016-9583 5.5 MediumApril 5, 2017
• jasper project jasper Integer overflow in jas_image.c in JasPer before 1.900.25 allows remote attackers to cause a... CVE-2016-9557 5.5 MediumMarch 23, 2017
• jasper project jasper, fedoraproject fedora, opensuse leap +2 more The calcstepsizes function in jpc_dec.c in JasPer 1.900.22 allows remote attackers to cause a... CVE-2016-9399 7.5 HighMarch 23, 2017
• jasper project jasper, fedoraproject fedora +1 more The jpc_dequantize function in jpc_dec.c in JasPer 1.900.13 allows remote attackers to cause a... CVE-2016-9397 7.5 HighMarch 23, 2017
• jasper project jasper Multiple integer overflows in the (1) jas_realloc function in base/jas_malloc.c and (2)... CVE-2016-9262 5.5 MediumMarch 23, 2017
• jasper project jasper The JPC_NOMINALGAIN function in jpc/jpc_t1cod.c in JasPer through 2.0.12 allows remote attackers... CVE-2016-9396 Fix available 7.5 HighMarch 23, 2017
• jasper project jasper The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.17 allows remote attackers to... CVE-2016-9394 Fix available 5.5 MediumMarch 23, 2017
• jasper project jasper The jpc_pi_nextrpcl function in jpc_t2cod.c in JasPer before 1.900.17 allows remote attackers to... CVE-2016-9393 Fix available 5.5 MediumMarch 23, 2017
• Show olderLoading…