Lucene search
+L

10 matches found

osv_clsa
osv_clsa
•added 2026/10/19 8:34 p.m.•10 views

CLSA-2026-1792442076 jasper: Fix of 4 CVEs

Add Amazon Linux 2 ELS support mirrors centos7els branch with .amzn2 dist via / leapfrog over stock 1.900.1-33.amzn2.0.1 - Import CVE-2020-27828 patch from amzn2 stock SRPM out-of-bounds write in jpc encoder; jasper-2.0.14-CVE-2020-27828.patch - Import CVE-2021-3443 patch from amzn2 stock SRPM...

7.8CVSS6.6AI score0.01388EPSS
SaveExploits2References5
Tenable Nessus
Tenable Nessus
•added 2022/04/30 12:00 a.m.•52 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : jasper (SUSE-SU-2022:1479-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1479-1 advisory. - CVE-2021-3467: Fixed NULL pointer deref in jp2decode bsc1184757. - CVE-2021-3443: Fixed NULL...

7.1CVSS6.4AI score0.01197EPSS
SaveExploits3References13
Mageia
Mageia
•added 2021/06/13 9:32 p.m.•74 views

Updated jasper packages fix security vulnerabilities

A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.27 handled component references in the JP2 image format decoder. A specially crafted JP2 image file could cause an application using the Jasper library to crash when opened CVE-2021-3443. A NULL pointer dereference fl...

5.5CVSS2.7AI score0.00762EPSS
SaveExploits1References3
osv_azl
osv_azl
•added 2021/03/25 7:15 p.m.•18 views

AZL-6495 CVE-2021-3467 affecting package jasper for versions less than 2.0.32-2

A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.26 handled component references in CDEF box in the JP2 image format decoder. A specially crafted JP2 image file could cause an application using the Jasper library to crash when opened...

5.5CVSS6.4AI score0.00629EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2021/03/25 7:15 p.m.•50 views

CVE-2021-3467

A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.26 handled component references in CDEF box in the JP2 image format decoder. A specially crafted JP2 image file could cause an application using the Jasper library to crash when opened...

5.5CVSS6.5AI score0.00629EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2021/03/25 7:15 p.m.•18 views

UBUNTU-CVE-2021-3467

A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.26 handled component references in CDEF box in the JP2 image format decoder. A specially crafted JP2 image file could cause an application using the Jasper library to crash when opened...

5.5CVSS6.3AI score0.00629EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/25 12:00 a.m.•7 views

CVE-2021-3467: NULL Pointer Dereference

A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.26 handled component references in CDEF box in the JP2 image format decoder. A specially crafted JP2 image file could cause an application using the Jasper library to crash when opened...

5.5CVSS5.5AI score0.00629EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/03/25 12:00 a.m.•15 views

JasPer code issues and vulnerabilities

JasPer is an open source project that aims to provide a free software-based reference implementation of the codecs specified in the JPEG-2000 Part-1 standard. A null pointer dereference vulnerability exists in versions of Jasper prior to 2.0.26. The vulnerability stems from a problem with the way...

5.5CVSS5.6AI score0.00629EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/12/20 12:00 a.m.•10 views

CVE-2017-14819: Out-of-bounds Read

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.5CVSS6.7AI score0.02456EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2017/11/14 12:00 a.m.•6 views

PT-2017-13693

Name of the Vulnerable Software and Affected Versions Foxit Reader version 8.3.1.21155 Description This issue allows remote attackers to disclose sensitive information on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file...

6.5CVSS0.02456EPSS
SaveExploits0References4
Rows per page
Query Builder