JA
Product
Jasper
101
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 38Medium 52Low 1
Watch
Add Jasper to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-20622 | 6.5 | Dec 31 | JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when "--output-format jp2" is used Affected: 2.0.14 |
| CVE-2018-20584 | 6.5 | Dec 30 | JasPer 2.0.14 allows remote attackers to cause a denial of service (application hang) via an attempted conversion to the jp2 format Affected: 2.0.14 |
| CVE-2018-20570 | 6.5 | Dec 28 | jp2_encode in jp2/jp2_enc.c in JasPer 2.0.14 has a heap-based buffer over-read Affected: 2.0.14 |
| CVE-2018-19542 | 6.5 | Nov 26 | An issue was discovered in JasPer 2.0.14 Affected: 2.0.14 |
| CVE-2018-19539 | 6.5 | Nov 26 | An issue was discovered in JasPer 2.0.14 Affected: 2.0.14 |
| CVE-2018-9252 | 6.5 | Apr 4 | JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_abstorelstepsize in libjasper/jpc/jpc_enc.c Affected: 2.0.14 |
| CVE-2016-9600 | 6.5 | Mar 12 | JasPer before version 2.0.10 is vulnerable to a null pointer dereference was found in the decoded creation of JPEG 2000 image files Affected: before 2.0.10 |
| CVE-2017-14132 | 6.5 | Sep 4 | JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24,… Affected: 2.0.13 |
| CVE-2016-2089 | 6.5 | Feb 8 | The jas_matrix_clip function in jas_seq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted JPEG 2000 image Affected: 1.900.1 |
| CVE-2016-1867 | 6.5 | Jan 20 | The jpc_pi_nextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG 2000 image Affected: 1.900.1 |
| CVE-2016-2116 | 5.7 | Apr 13 | Memory leak in the jas_iccprof_createfrombuf function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted ICC… Affected: through 1.900.1 |
| CVE-2025-8835 | 5.5 | Aug 11 | A vulnerability was found in JasPer up to 4.2.5 Affected: through 4.2.5 |
| CVE-2022-40755 | 5.5 | Sep 16 | JasPer 3.0.6 allows denial of service via a reachable assertion in the function inttobits in libjasper/base/jas_image.c Affected: 3.0.6 |
| CVE-2021-27845 | 5.5 | Jul 15 | A Divide-by-zero vulnerability exists in JasPer Image Coding Toolkit 2.0 in jasper/src/libjasper/jpc/jpc_enc.c Affected: 2.0.0 before 2.0.17 |
| CVE-2021-3467 | 5.5 | Mar 25 | A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.26 handled component references in CDEF box in the JP2 image format decoder Affected: before 2.0.26 |
| CVE-2021-3443 | 5.5 | Mar 25 | A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.27 handled component references in the JP2 image format decoder Affected: before 2.0.27 |
| CVE-2021-26927 | 5.5 | Feb 23 | A flaw was found in jasper before 2.0.25 Affected: before 2.0.25 |
| CVE-2021-3272 | 5.5 | Jan 27 | jp2_decode in jp2/jp2_dec.c in libjasper in JasPer 2.0.24 has a heap-based buffer over-read when there is an invalid relationship between the number of channels and the number of… Affected: 2.0.24 |
| CVE-2017-14232 | 5.5 | Aug 15 | The read_chunk function in flif-dec.cpp in Free Lossless Image Format (FLIF) 0.3 allows remote attackers to cause a denial of service (invalid memory read and application crash)… Affected: through 2.0.16 |
| CVE-2018-19139 | 5.5 | Nov 9 | An issue has been found in JasPer 2.0.14 Affected: 2.0.14 |
| CVE-2018-18873 | 5.5 | Oct 31 | An issue was discovered in JasPer 2.0.14 Affected: 2.0.14 |
| CVE-2018-9055 | 5.5 | Mar 27 | JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_firstone in libjasper/jpc/jpc_math.c Affected: 2.0.14 |
| CVE-2016-9591 | 5.5 | Mar 9 | JasPer before version 2.0.12 is vulnerable to a use-after-free in the way it decodes certain JPEG 2000 image files resulting in a crash on the application using JasPer Affected: before 2.0.12 |
| CVE-2015-5203 | 5.5 | Aug 2 | Double free vulnerability in the jasper_image_stop_load function in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file Affected: 1.900.17 |
| CVE-2015-5221 | 5.5 | Jul 25 | Use-after-free vulnerability in the mif_process_cmpt function in libjasper/mif/mif_cod.c in the JasPer JPEG-2000 library before 1.900.2 allows remote attackers to cause a denial… Affected: through 1.900.1 |
| CVE-2017-9782 | 5.5 | Jun 21 | JasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jp2_decode function in… Affected: 2.0.12 |
| CVE-2016-8884 | 5.5 | Mar 28 | The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo… Affected: 1.900.5 |
| CVE-2016-9557 | 5.5 | Mar 23 | Integer overflow in jas_image.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service (application crash) via a crafted file Affected: through 1.900.24 |
| CVE-2016-9395 | 5.5 | Mar 23 | The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service (assertion failure) via a crafted file Affected: through 1.900.24 |
| CVE-2016-9394 | 5.5 | Mar 23 | The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file Affected: through 1.900.16 |
| CVE-2016-9393 | 5.5 | Mar 23 | The jpc_pi_nextrpcl function in jpc_t2cod.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file Affected: 1.900.17 |
| CVE-2016-9392 | 5.5 | Mar 23 | The calcstepsizes function in jpc_dec.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file Affected: through 1.900.16 |
| CVE-2016-9390 | 5.5 | Mar 23 | The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file Affected: through 1.900.13 |
| CVE-2016-9388 | 5.5 | Mar 23 | The ras_getcmap function in ras_dec.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file Affected: before 1.900.14 |
| CVE-2016-9262 | 5.5 | Mar 23 | Multiple integer overflows in the (1) jas_realloc function in base/jas_malloc.c and (2) mem_resize function in base/jas_stream.c in JasPer before 1.900.22 allow remote attackers… Affected: through 1.900.21 |
| CVE-2016-8887 | 5.5 | Mar 23 | The jp2_colr_destroy function in libjasper/jp2/jp2_cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (NULL pointer dereference) Affected: through 1.900.9 |
| CVE-2016-8885 | 5.5 | Mar 23 | The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo… Affected: through 1.900.8 |
| CVE-2017-5505 | 5.5 | Mar 16 | The jas_matrix_asl function in jas_seq.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted image Affected: 1.900.27 |
| CVE-2017-6851 | 5.5 | Mar 15 | The jas_matrix_bindsub function in jas_seq.c in JasPer 2.0.10 allows remote attackers to cause a denial of service (invalid read) via a crafted image Affected: through 2.0.9 |
| CVE-2017-6850 | 5.5 | Mar 15 | The jp2_cdef_destroy function in jp2_cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image Affected: through 2.0.12 |
| CVE-2017-5504 | 5.5 | Mar 1 | The jpc_undo_roi function in libjasper/jpc/jpc_dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted image Affected: 1.900.17 |
| CVE-2017-5503 | 5.5 | Mar 1 | The dec_clnpass function in libjasper/jpc/jpc_t1dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory write and crash) or possibly have… Affected: 1.900.27 |
| CVE-2017-5502 | 5.5 | Mar 1 | libjasper/jp2/jp2_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value Affected: 1.900.17 |
| CVE-2017-5501 | 5.5 | Mar 1 | Integer overflow in libjasper/jpc/jpc_tsfb.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted file Affected: 1.900.17 |
| CVE-2017-5500 | 5.5 | Mar 1 | libjasper/jpc/jpc_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value Affected: 1.900.17 |
| CVE-2017-5499 | 5.5 | Mar 1 | Integer overflow in libjasper/jpc/jpc_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted file Affected: 1.900.17 |
| CVE-2017-5498 | 5.5 | Mar 1 | libjasper/include/jasper/jas_math.h in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value Affected: 1.900.17 |
| CVE-2016-8692 | 5.5 | Feb 15 | The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (divide-by-zero error and application… Affected: through 1.900.3 |
| CVE-2016-8691 | 5.5 | Feb 15 | The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (divide-by-zero error and application… Affected: through 1.900.3 |
| CVE-2016-8690 | 5.5 | Feb 15 | The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted BMP… Affected: through 1.900.29 |