Login Request a demo
JP
Vendor
Jasper Project
1 product with CVEs on record
101
CVEs
0
On KEV
0
New 30D
Products
JA
Jasper
Jasper Project
8.8
101 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2025-8837
JA
Jasper
Jasper Project
7.8
0%
Aug 11A vulnerability was identified in JasPer up to 4.2.5
CVE-2025-8836
JA
Jasper
Jasper Project
3.3
0%
Aug 11A vulnerability was determined in JasPer up to 4.2.5
CVE-2025-8835
JA
Jasper
Jasper Project
5.5
0%
Aug 11A vulnerability was found in JasPer up to 4.2.5
CVE-2023-51257
JA
Jasper
Jasper Project
7.8
0%
Jan 16An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code
CVE-2022-2963
JA
Jasper
Jasper Project
7.5
2%
Oct 14A vulnerability found in jasper
CVE-2022-40755
JA
Jasper
Jasper Project
5.5
0%
Sep 16JasPer 3.0.6 allows denial of service via a reachable assertion in the function inttobits in libjasper/base/jas_image.c
CVE-2021-27845
JA
Jasper
Jasper Project
5.5
1%
Jul 15A Divide-by-zero vulnerability exists in JasPer Image Coding Toolkit 2.0 in jasper/src/libjasper/jpc/jpc_enc.c
CVE-2021-3467
JA
Jasper
Jasper Project
5.5
1%
Mar 25A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.26 handled component references in CDEF box in the JP2 image format decoder
CVE-2021-3443
JA
Jasper
Jasper Project
5.5
1%
Mar 25A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.27 handled component references in the JP2 image format decoder
CVE-2021-26927
JA
Jasper
Jasper Project
5.5
1%
Feb 23A flaw was found in jasper before 2.0.25
CVE-2021-26926
JA
Jasper
Jasper Project
7.1
1%
Feb 23A flaw was found in jasper before 2.0.25
CVE-2021-3272
JA
Jasper
Jasper Project
5.5
1%
Jan 27jp2_decode in jp2/jp2_dec.c in libjasper in JasPer 2.0.24 has a heap-based buffer over-read when there is an invalid relationship between the number of channels and the number of…
CVE-2020-27828
JA
Jasper
Jasper Project
7.8
1%
Dec 11There's a flaw in jasper's jpc encoder in versions prior to 2.0.23
CVE-2015-8751
JA
Jasper
Jasper Project
8.8
3%
Feb 17Integer overflow in the jas_matrix_create function in JasPer allows context-dependent attackers to have unspecified impact via a crafted JPEG 2000 image, related to integer…
CVE-2017-14232
JA
Jasper
Jasper Project
5.5
1%
Aug 15The read_chunk function in flif-dec.cpp in Free Lossless Image Format (FLIF) 0.3 allows remote attackers to cause a denial of service (invalid memory read and application crash)…
CVE-2018-20622
JA
Jasper
Jasper Project
6.5
3%
Dec 31JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when "--output-format jp2" is used
CVE-2018-20584
JA
Jasper
Jasper Project
6.5
3%
Dec 30JasPer 2.0.14 allows remote attackers to cause a denial of service (application hang) via an attempted conversion to the jp2 format
CVE-2018-20570
JA
Jasper
Jasper Project
6.5
2%
Dec 28jp2_encode in jp2/jp2_enc.c in JasPer 2.0.14 has a heap-based buffer over-read
CVE-2018-19539
JA
Jasper
Jasper Project
6.5
2%
Nov 26An issue was discovered in JasPer 2.0.14
CVE-2018-19543
JA
Jasper
Jasper Project
7.8
2%
Nov 26An issue was discovered in JasPer 2.0.14
CVE-2018-19542
JA
Jasper
Jasper Project
6.5
2%
Nov 26An issue was discovered in JasPer 2.0.14
CVE-2018-19541
JA
Jasper
Jasper Project
8.8
3%
Nov 26An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21,…
CVE-2018-19540
JA
Jasper
Jasper Project
8.8
2%
Nov 26An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21,…
CVE-2018-19139
JA
Jasper
Jasper Project
5.5
2%
Nov 9An issue has been found in JasPer 2.0.14
CVE-2018-18873
JA
Jasper
Jasper Project
5.5
1%
Oct 31An issue was discovered in JasPer 2.0.14
CVE-2016-9583
JA
Jasper
Jasper Project
7.8
2%
Aug 1An out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper before 2.0.6 when processing crafted input
CVE-2016-8654
JA
Jasper
Jasper Project
7.8
2%
Aug 1A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small size
CVE-2018-9154
JA
Jasper
Jasper Project
7.5
3%
May 4There is a reachable abort in the function jpc_dec_process_sot in libjasper/jpc/jpc_dec.c of JasPer 2.0.14 that will lead to a remote denial of service attack by triggering an…
CVE-2018-9252
JA
Jasper
Jasper Project
6.5
2%
Apr 4JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_abstorelstepsize in libjasper/jpc/jpc_enc.c
CVE-2018-9055
JA
Jasper
Jasper Project
5.5
2%
Mar 27JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_firstone in libjasper/jpc/jpc_math.c
CVE-2016-9600
JA
Jasper
Jasper Project
6.5
1%
Mar 12JasPer before version 2.0.10 is vulnerable to a null pointer dereference was found in the decoded creation of JPEG 2000 image files
CVE-2016-9591
JA
Jasper
Jasper Project
5.5
1%
Mar 9JasPer before version 2.0.12 is vulnerable to a use-after-free in the way it decodes certain JPEG 2000 image files resulting in a crash on the application using JasPer
CVE-2017-14229
JA
Jasper
Jasper Project
7.5
3%
Sep 9There is an infinite loop in the jpc_dec_tileinit function in jpc/jpc_dec.c of Jasper 2.0.13
CVE-2017-14132
JA
Jasper
Jasper Project
6.5
2%
Sep 4JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24,…
CVE-2017-13752
JA
Jasper
Jasper Project
7.5
4%
Aug 29There is a reachable assertion abort in the function jpc_dequantize() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service attack
CVE-2017-13751
JA
Jasper
Jasper Project
7.5
4%
Aug 29There is a reachable assertion abort in the function calcstepsizes() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service attack
CVE-2017-13750
JA
Jasper
Jasper Project
7.5
4%
Aug 29There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1296 in JasPer 2.0.12 that will lead to a remote denial of service attack
CVE-2017-13749
JA
Jasper
Jasper Project
7.5
4%
Aug 29There is a reachable assertion abort in the function jpc_pi_nextrpcl() in jpc/jpc_t2cod.c in JasPer 2.0.12 that will lead to a remote denial of service attack
CVE-2017-13748
JA
Jasper
Jasper Project
7.5
5%
Aug 29There are lots of memory leaks in JasPer 2.0.12, triggered in the function jas_strdup() in base/jas_string.c, that will lead to a remote denial of service attack
CVE-2017-13747
JA
Jasper
Jasper Project
7.5
4%
Aug 29There is a reachable assertion abort in the function jpc_floorlog2() in jpc/jpc_math.c in JasPer 2.0.12 that will lead to a remote denial of service attack
CVE-2017-13746
JA
Jasper
Jasper Project
7.5
4%
Aug 29There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1297 in JasPer 2.0.12 that will lead to a remote denial of service attack
CVE-2017-13745
JA
Jasper
Jasper Project
7.5
4%
Aug 29There is a reachable assertion abort in the function jpc_dec_process_sot() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service attack by triggering an…
CVE-2015-5203
JA
Jasper
Jasper Project
5.5
2%
Aug 2Double free vulnerability in the jasper_image_stop_load function in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file
CVE-2015-5221
JA
Jasper
Jasper Project
5.5
2%
Jul 25Use-after-free vulnerability in the mif_process_cmpt function in libjasper/mif/mif_cod.c in the JasPer JPEG-2000 library before 1.900.2 allows remote attackers to cause a denial…
CVE-2017-1000050
JA
Jasper
Jasper Project
7.5
3%
Jul 17JasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2_encode which failed to check to see if the image contained at least one component resulting in a…
CVE-2017-9782
JA
Jasper
Jasper Project
5.5
2%
Jun 21JasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jp2_decode function in…
CVE-2016-8884
JA
Jasper
Jasper Project
5.5
2%
Mar 28The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo…
CVE-2016-9557
JA
Jasper
Jasper Project
5.5
2%
Mar 23Integer overflow in jas_image.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service (application crash) via a crafted file
CVE-2016-9399
JA
Jasper
Jasper Project
7.5
4%
Mar 23The calcstepsizes function in jpc_dec.c in JasPer 1.900.22 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors
CVE-2016-9398
JA
Jasper
Jasper Project
7.5
6%
Mar 23The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors
CVE-2016-9397
JA
Jasper
Jasper Project
7.5
4%
Mar 23The jpc_dequantize function in jpc_dec.c in JasPer 1.900.13 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors
CVE-2016-9396
JA
Jasper
Jasper Project
7.5
6%
Mar 23The JPC_NOMINALGAIN function in jpc/jpc_t1cod.c in JasPer through 2.0.12 allows remote attackers to cause a denial of service (JPC_COX_RFT assertion failure) via unspecified…
CVE-2016-9395
JA
Jasper
Jasper Project
5.5
1%
Mar 23The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service (assertion failure) via a crafted file
CVE-2016-9394
JA
Jasper
Jasper Project
5.5
2%
Mar 23The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file
CVE-2016-9393
JA
Jasper
Jasper Project
5.5
2%
Mar 23The jpc_pi_nextrpcl function in jpc_t2cod.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file
CVE-2016-9392
JA
Jasper
Jasper Project
5.5
2%
Mar 23The calcstepsizes function in jpc_dec.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file
CVE-2016-9391
JA
Jasper
Jasper Project
7.5
4%
Mar 23The jpc_bitstream_getbits function in jpc_bs.c in JasPer before 2.0.10 allows remote attackers to cause a denial of service (assertion failure) via a very large integer
CVE-2016-9390
JA
Jasper
Jasper Project
5.5
2%
Mar 23The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file
CVE-2016-9389
JA
Jasper
Jasper Project
7.5
4%
Mar 23The jpc_irct and jpc_iict functions in jpc_mct.c in JasPer before 1.900.14 allow remote attackers to cause a denial of service (assertion failure)
CVE-2016-9388
JA
Jasper
Jasper Project
5.5
2%
Mar 23The ras_getcmap function in ras_dec.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file