Lucene search
+L

2354 matches found

Vulnrichment
Vulnrichment
•added 2025/08/11 7:32 a.m.•2 views

CVE-2025-8836 JasPer JPEG2000 Encoder jpc_enc.c jpc_floorlog2 assertion

A vulnerability was determined in JasPer up to 4.2.5. Affected by this issue is the function jpcfloorlog2 of the file src/libjasper/jpc/jpcenc.c of the component JPEG2000 Encoder. The manipulation leads to reachable assertion. The attack needs to be approached locally. The exploit has been...

4.8CVSS7.1AI score0.00206EPSS
SaveExploits1References6
OSV
OSV
•added 2025/08/11 7:32 a.m.•13 views

CVE-2025-8836 JasPer JPEG2000 Encoder jpc_enc.c jpc_floorlog2 assertion

A vulnerability was determined in JasPer up to 4.2.5. Affected by this issue is the function jpcfloorlog2 of the file src/libjasper/jpc/jpcenc.c of the component JPEG2000 Encoder. The manipulation leads to reachable assertion. The attack needs to be approached locally. The exploit has been...

4.8CVSS4.8AI score
SaveExploits0References8
Cvelist
Cvelist
•added 2025/08/11 7:32 a.m.•34 views

CVE-2025-8836 JasPer JPEG2000 Encoder jpc_enc.c jpc_floorlog2 assertion

A vulnerability was determined in JasPer up to 4.2.5. Affected by this issue is the function jpcfloorlog2 of the file src/libjasper/jpc/jpcenc.c of the component JPEG2000 Encoder. The manipulation leads to reachable assertion. The attack needs to be approached locally. The exploit has been...

4.8CVSS0.00206EPSS
SaveExploits1References6
AlpineLinux
AlpineLinux
•added 2025/08/11 7:15 a.m.•31 views

CVE-2025-8835

A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jasimagechclrspc of the file src/libjasper/base/jasimage.c of the component Image Color Space Conversion Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack...

5.5CVSS7.1AI score0.00218EPSS
SaveExploits1References7
OSV
OSV
•added 2025/08/11 7:15 a.m.•11 views

AZL-66162 CVE-2025-8835 affecting package jasper for versions less than 4.2.1-3

A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jasimagechclrspc of the file src/libjasper/base/jasimage.c of the component Image Color Space Conversion Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack...

5.5CVSS4.4AI score0.00218EPSS
SaveExploits1References1
NVD
NVD
•added 2025/08/11 7:15 a.m.•10 views

CVE-2025-8835

A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jasimagechclrspc of the file src/libjasper/base/jasimage.c of the component Image Color Space Conversion Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack...

5.5CVSS0.00218EPSS
SaveExploits1References7
OSV
OSV
•added 2025/08/11 7:15 a.m.•11 views

UBUNTU-CVE-2025-8835

A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jasimagechclrspc of the file src/libjasper/base/jasimage.c of the component Image Color Space Conversion Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack...

5.5CVSS5AI score0.00218EPSS
SaveExploits1References9
Cvelist
Cvelist
•added 2025/08/11 7:02 a.m.•34 views

CVE-2025-8835 JasPer Image Color Space Conversion jas_image.c jas_image_chclrspc null pointer dereference

A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jasimagechclrspc of the file src/libjasper/base/jasimage.c of the component Image Color Space Conversion Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack...

4.8CVSS0.00218EPSS
SaveExploits1References7
CVE
CVE
•added 2025/08/11 7:02 a.m.•68 views

CVE-2025-8835

CVE-2025-8835 (and related CVEs 8836, 8837) affects JasPer up to version 4.2.5. The vulnerability lies in jas_image_chclrspc in src/libjasper/base/jas_image.c, causing a null pointer dereference with local attack vector. Open advisories show the same root cause across multiple distributions (SUSE...

5.5CVSS7AI score0.00218EPSS
SaveExploits1References7Affected Software1
Mend
Mend
•added 2025/08/11 7:02 a.m.•3 views

CVE-2025-8835

A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jasimagechclrspc of the file src/libjasper/base/jasimage.c of the component Image Color Space Conversion Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack...

5.5CVSS0.00218EPSS
SaveExploits1References9
OSV
OSV
•added 2025/08/11 7:02 a.m.•8 views

CVE-2025-8835 JasPer Image Color Space Conversion jas_image.c jas_image_chclrspc null pointer dereference

A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jasimagechclrspc of the file src/libjasper/base/jasimage.c of the component Image Color Space Conversion Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack...

4.8CVSS5AI score
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2025/08/11 12:00 a.m.•12 views

PT-2025-32527

Name of the Vulnerable Software and Affected Versions: JasPer versions up to 4.2.5 Description: A vulnerability exists in JasPer due to a null pointer dereference in the jas image chclrspc function within the Image Color Space Conversion Handler component file src/libjasper/base/jas image.c. This...

5.5CVSS5.4AI score0.00218EPSS
SaveExploits1References37
CNNVD
CNNVD
•added 2025/08/11 12:00 a.m.•17 views

JasPer 安全漏洞

Jasper is a flexible and powerful GitHub issue reader open-sourced by Jasper. A security vulnerability exists in JasPer 4.2.5 and earlier versions, which stems from the presence of reachable assertions in the jpcfloorlog2 function...

4.8CVSS4.4AI score0.00206EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/11 12:00 a.m.•3 views

CVE-2025-8836: Reachable Assertion

A vulnerability was determined in JasPer up to 4.2.5. Affected by this issue is the function jpcfloorlog2 of the file src/libjasper/jpc/jpcenc.c of the component JPEG2000 Encoder. The manipulation leads to reachable assertion. The attack needs to be approached locally. The exploit has been...

4.8CVSS4.6AI score0.00206EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/08/11 12:00 a.m.•21 views

JasPer 安全漏洞

Jasper is a flexible and powerful GitHub issue reader open-sourced by Jasper. A security vulnerability exists in JasPer 4.2.5 and earlier versions, which stems from a post-release reuse issue in the function jpcdecdump in the file src/libjasper/jpc/jpcdec.c. The vulnerability is caused by the...

7.8CVSS6.4AI score0.00228EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2025/08/11 12:00 a.m.•13 views

PT-2025-32528

Name of the Vulnerable Software and Affected Versions: JasPer versions up to 4.2.5 Description: A vulnerability exists in JasPer up to version 4.2.5, specifically within the JPEG2000 Encoder component. The issue resides in the jpc floorlog2 function located in the src/libjasper/jpc/jpc enc.c file...

4.8CVSS5.7AI score0.00206EPSS
SaveExploits1References37
Positive Technologies
Positive Technologies
•added 2025/08/11 12:00 a.m.•9 views

PT-2025-32530

Name of the Vulnerable Software and Affected Versions: JasPer versions up to 4.2.5 Description: A use-after-free vulnerability exists in JasPer up to version 4.2.5. The issue affects the jpc dec dump function within the JPEG2000 File Handler component, located in the file src/libjasper/jpc/jpc...

7.8CVSS6AI score0.00228EPSS
SaveExploits1References39
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/11 12:00 a.m.•4 views

CVE-2025-8837: Use After Free

A vulnerability was identified in JasPer up to 4.2.5. This affects the function jpcdecdump of the file src/libjasper/jpc/jpcdec.c of the component JPEG2000 File Handler. The manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public...

7.8CVSS4.8AI score0.00228EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/11 12:00 a.m.•5 views

CVE-2025-8835: NULL Pointer Dereference

A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jasimagechclrspc of the file src/libjasper/base/jasimage.c of the component Image Color Space Conversion Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack...

5.5CVSS4.5AI score0.00218EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/08/11 12:00 a.m.•18 views

Jasper 安全漏洞

Jasper is a flexible and powerful GitHub issue reader open-sourced by Jasper. A security vulnerability exists in JasPer 4.2.5 and earlier versions, which stems from a null pointer dereference in the jasimagechclrspc function...

5.5CVSS4.4AI score0.00218EPSS
SaveExploits1References7
Rows per page
Query Builder