Lucene search

K

RedhatCVELIST:CVE-2021-26926

HistoryFeb 23, 2021 - 5:43 p.m.

CVE-2021-26926

2021-02-2317:43:25

CWE-125

redhat

www.cve.org

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.3%

A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2_decode function whic may lead to disclosure of information or program crash.

CNA Affected

[
  {
    "product": "jasper",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "jasper 2.0.25"
      }
    ]
  }
]

References

github.com/jasper-software/jasper/commit/41f214b121b837fa30d9ca5f2430212110f5cd9b

github.com/jasper-software/jasper/issues/264

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JSXESYUHMO522Z3RHXOQ2SJNWP3XTO67/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JYVCFVTVPL66OS7LCNLUSYCMYQAVWXMM/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRZFZSJ4UVLLMXSKHR455TAC2SD3TOHI/

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.3%

Related for CVELIST:CVE-2021-26926

redhatcve1 ubuntucve1 osv3 cbl_mariner1 nvd1 prion1 cve1 fedora5 nessus19 openvas11 rosalinux1 mageia1 freebsd1 oraclelinux1 redhat2 almalinux1 suse1 rocky1 amazon2 ibm1