NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the jasimagechclrspc function. An attacker can cause a denial of service by triggering a null pointer dereference during image color space conversion. Remediation A fix was pushed into the master branch but...

CVE-2025-8836 JasPer JPEG2000 Encoder jpc_enc.c jpc_floorlog2 assertion

A vulnerability was determined in JasPer up to 4.2.5. Affected by this issue is the function jpcfloorlog2 of the file src/libjasper/jpc/jpcenc.c of the component JPEG2000 Encoder. The manipulation leads to reachable assertion. The attack needs to be approached locally. The exploit has been...

CVE-2025-8836 JasPer JPEG2000 Encoder jpc_enc.c jpc_floorlog2 assertion

A vulnerability was determined in JasPer up to 4.2.5. Affected by this issue is the function jpcfloorlog2 of the file src/libjasper/jpc/jpcenc.c of the component JPEG2000 Encoder. The manipulation leads to reachable assertion. The attack needs to be approached locally. The exploit has been...

CVE-2025-8836 JasPer JPEG2000 Encoder jpc_enc.c jpc_floorlog2 assertion

A vulnerability was determined in JasPer up to 4.2.5. Affected by this issue is the function jpcfloorlog2 of the file src/libjasper/jpc/jpcenc.c of the component JPEG2000 Encoder. The manipulation leads to reachable assertion. The attack needs to be approached locally. The exploit has been...

CVE-2025-8836

CVE-2025-8836 affects JasPer up to 4.2.5, where manipulation in jpc_floorlog2 (src/libjasper/jpc/jpc_enc.c - JPC Encoder) can trigger a reachable assertion. Exploitation is described as local; public exploit guidance exists. Remediation is available via patches, e.g., upgrade to JasPer 4.2.8 (ope...

CVE-2025-8835

A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jasimagechclrspc of the file src/libjasper/base/jasimage.c of the component Image Color Space Conversion Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack...

CVE-2025-8835

A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jasimagechclrspc of the file src/libjasper/base/jasimage.c of the component Image Color Space Conversion Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack...

AZL-66162 CVE-2025-8835 affecting package jasper for versions less than 4.2.1-3

A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jasimagechclrspc of the file src/libjasper/base/jasimage.c of the component Image Color Space Conversion Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack...

UBUNTU-CVE-2025-8835

A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jasimagechclrspc of the file src/libjasper/base/jasimage.c of the component Image Color Space Conversion Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack...

CVE-2025-8835 JasPer Image Color Space Conversion jas_image.c jas_image_chclrspc null pointer dereference

A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jasimagechclrspc of the file src/libjasper/base/jasimage.c of the component Image Color Space Conversion Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack...

CVE-2025-8835

CVE-2025-8835 (and related CVEs 8836, 8837) affects JasPer up to version 4.2.5. The vulnerability lies in jas_image_chclrspc in src/libjasper/base/jas_image.c, causing a null pointer dereference with local attack vector. Open advisories show the same root cause across multiple distributions (SUSE...

CVE-2025-8835 JasPer Image Color Space Conversion jas_image.c jas_image_chclrspc null pointer dereference

A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jasimagechclrspc of the file src/libjasper/base/jasimage.c of the component Image Color Space Conversion Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack...

JasPer 安全漏洞

Jasper is a flexible and powerful GitHub issue reader open-sourced by Jasper. A security vulnerability exists in JasPer 4.2.5 and earlier versions, which stems from the presence of reachable assertions in the jpcfloorlog2 function...

Jasper 安全漏洞

Jasper is a flexible and powerful GitHub issue reader open-sourced by Jasper. A security vulnerability exists in JasPer 4.2.5 and earlier versions, which stems from a null pointer dereference in the jasimagechclrspc function...

JasPer 安全漏洞

Jasper is a flexible and powerful GitHub issue reader open-sourced by Jasper. A security vulnerability exists in JasPer 4.2.5 and earlier versions, which stems from a post-release reuse issue in the function jpcdecdump in the file src/libjasper/jpc/jpcdec.c. The vulnerability is caused by the...

PT-2025-32527

Name of the Vulnerable Software and Affected Versions: JasPer versions up to 4.2.5 Description: A vulnerability exists in JasPer due to a null pointer dereference in the jas image chclrspc function within the Image Color Space Conversion Handler component file src/libjasper/base/jas image.c. This...

PT-2025-32530

Name of the Vulnerable Software and Affected Versions: JasPer versions up to 4.2.5 Description: A use-after-free vulnerability exists in JasPer up to version 4.2.5. The issue affects the jpc dec dump function within the JPEG2000 File Handler component, located in the file src/libjasper/jpc/jpc...

PT-2025-32528

Name of the Vulnerable Software and Affected Versions: JasPer versions up to 4.2.5 Description: A vulnerability exists in JasPer up to version 4.2.5, specifically within the JPEG2000 Encoder component. The issue resides in the jpc floorlog2 function located in the src/libjasper/jpc/jpc enc.c file...

NewStart CGSL MAIN 7.02 : jasper Multiple Vulnerabilities (NS-SA-2025-0130)

The remote NewStart CGSL host, running version MAIN 7.02, has jasper packages installed that are affected by multiple vulnerabilities: - An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code. CVE-2023-51257 - In Jasper 4.2.2,...

NewStart CGSL MAIN 7.02 : jasper Vulnerability (NS-SA-2025-0082)

The remote NewStart CGSL host, running version MAIN 7.02, has jasper packages installed that are affected by a vulnerability: - An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code. CVE-2023-51257 Note that Nessus has not...