Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:46558
HistoryApr 22, 2024 - 6:14 a.m.

Assertion Failure

2024-04-2206:14:10
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
vulnerability
jpc_streamlist_remove
denial of service
malformed image
libjasper.so

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

libjasper.so is vulnerable to an Assertion Failure. The vulnerability is due to improper handling in the jpc_streamlist_remove function within jpc_dec.c, allowing attackers to trigger a denial of service through a malformed image file.

CPENameOperatorVersion
libjasper.sole7.0.0
libjasper.sole7.0.0

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%