Lucene search

K
cve[email protected]CVE-2024-31744
HistoryApr 19, 2024 - 1:15 p.m.

CVE-2024-31744

2024-04-1913:15:13
web.nvd.nist.gov
33
jasper 4.2.2
jpc_streamlist_remove
assertion failure
denial of service
specific image file

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

In Jasper 4.2.2, the jpc_streamlist_remove function in src/libjasper/jpc/jpc_dec.c:2407 has an assertion failure vulnerability, allowing attackers to cause a denial of service attack through a specific image file.

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%