TI-2025-08088 CVE-2025-8837 · GHSA-p7cc-89mg-9wr6
JasPer JPEG2000 File jpc_dec.c jpc_dec_dump use after free
Priority MEDIUM 55
A vulnerability was identified in JasPer up to 4.2.5.
Vulnerabilities
101 records
TI-2025-08087 CVE-2025-8836 · GHSA-hvcg-67f3-52cf
JasPer JPEG2000 Encoder jpc_enc.c jpc_floorlog2 assertion
Priority MEDIUM 55
A vulnerability was determined in JasPer up to 4.2.5.
TI-2025-08086 CVE-2025-8835 · GHSA-f4c9-2q5g-hq95
JasPer Image Color Space Conversion jas_image.c jas_image_chclrspc null pointer dereference
Priority MEDIUM 55
A vulnerability was found in JasPer up to 4.2.5.
TI-2023-27963 CVE-2023-51257 · GHSA-c74w-77jp-9c48
An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local…
Priority HIGH 69
An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code.
TI-2022-02737 CVE-2022-2963 · GHSA-g89h-fpvv-hmhh
Memory leak in jasper
Priority HIGH 72
A vulnerability found in jasper.
TI-2022-19382 CVE-2022-40755 · GHSA-7p4v-jrq5-5jrj
JasPer 3.0.6 allows denial of service via a reachable assertion in the function inttobits in libjasper/base/jas_image.c.
Priority LOW 25
JasPer 3.0.6 allows denial of service via a reachable assertion in the function inttobits in libjasper/base/jas_image.c.
TI-2021-09206 CVE-2021-27845 · GHSA-6xx8-4xh5-jh9w
A Divide-by-zero vulnerability exists in JasPer Image Coding Toolkit 2.0 in jasper/src/libjasper/jpc/jpc_enc.c
Priority LOW 26
A Divide-by-zero vulnerability exists in JasPer Image Coding Toolkit 2.0 in jasper/src/libjasper/jpc/jpc_enc.c
TI-2021-02430 CVE-2021-3467 · GHSA-grq7-m4w9-7hrw
NULL pointer dereference in jasper
Priority LOW 26
A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.26 handled component references in CDEF box in the JP2 image format decoder.
TI-2021-02407 CVE-2021-3443 · GHSA-f675-2h8m-hfrq
NULL pointer dereference in jasper
Priority LOW 26
A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.27 handled component references in the JP2 image format decoder.
TI-2021-08532 CVE-2021-26927 · GHSA-9768-8435-chr8
NULL pointer dereference in jasper
Priority LOW 27
A flaw was found in jasper before 2.0.25.
TI-2021-08531 CVE-2021-26926 · GHSA-xx8c-rpq7-pg6p
Out-of-bounds read in jasper
Priority LOW 34
A flaw was found in jasper before 2.0.25.
TI-2021-02293 CVE-2021-3272 · GHSA-g2j5-mv4m-h6rc
jp2_decode in jp2/jp2_dec.c in libjasper in JasPer 2.0.24 has a heap-based buffer…
Priority LOW 27
jp2_decode in jp2/jp2_dec.c in libjasper in JasPer 2.0.24 has a heap-based buffer over-read when there is an invalid relationship between the number of channels and the number of image components.
TI-2020-16899 CVE-2020-27828 · GHSA-x4rf-6444-7fh8
Improper input validation in jasper
Priority LOW 37
There's a flaw in jasper's jpc encoder in versions prior to 2.0.23.
TI-2015-07201 CVE-2015-8751 · GHSA-w5gw-jv97-p9hj
Integer overflow in the jas_matrix_create function in JasPer allows context-dependent…
Priority MEDIUM 43
Integer overflow in the jas_matrix_create function in JasPer allows context-dependent attackers to have unspecified impact via a crafted JPEG 2000 image, related to integer multiplication for memory allocation.
TI-2017-10363 CVE-2017-14232 · GHSA-mv74-39qc-wvxg
The read_chunk function in flif-dec.cpp in Free Lossless Image Format (FLIF) 0.3 allows…
Priority LOW 27
The read_chunk function in flif-dec.cpp in Free Lossless Image Format (FLIF) 0.3 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted flif file.
TI-2018-14641 CVE-2018-20622 · GHSA-v9q8-5383-5fmx
JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when "--output-format jp2" is used.
Priority LOW 34
JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when "--output-format jp2" is used.
TI-2018-14606 CVE-2018-20584 · GHSA-7vh4-m9mj-3v2r
JasPer 2.0.14 allows remote attackers to cause a denial of service (application hang) via…
Priority LOW 34
JasPer 2.0.14 allows remote attackers to cause a denial of service (application hang) via an attempted conversion to the jp2 format.
TI-2018-14593 CVE-2018-20570 · GHSA-j3h5-m47q-9g35
jp2_encode in jp2/jp2_enc.c in JasPer 2.0.14 has a heap-based buffer over-read.
Priority LOW 33
jp2_encode in jp2/jp2_enc.c in JasPer 2.0.14 has a heap-based buffer over-read.
TI-2018-13841 CVE-2018-19543 · GHSA-v2x3-gcmp-cp36
An issue was discovered in JasPer 2.0.14.
Priority LOW 37
An issue was discovered in JasPer 2.0.14.
TI-2018-13840 CVE-2018-19542 · GHSA-qp52-65cq-8g48
An issue was discovered in JasPer 2.0.14.
Priority LOW 33
An issue was discovered in JasPer 2.0.14.
TI-2018-13839 CVE-2018-19541 · GHSA-2rx7-vfcv-7r3v
An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12…
Priority MEDIUM 43
An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26…
TI-2018-13838 CVE-2018-19540 · GHSA-9f4h-jrhq-rc6w
An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12…
Priority MEDIUM 42
An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26…
TI-2018-13837 CVE-2018-19539 · GHSA-p8xp-97mv-85m7
An issue was discovered in JasPer 2.0.14.
Priority LOW 33
An issue was discovered in JasPer 2.0.14.
TI-2018-13573 CVE-2018-19139 · GHSA-7qrv-j944-r9pw
An issue has been found in JasPer 2.0.14.
Priority LOW 28
An issue has been found in JasPer 2.0.14.
TI-2018-13372 CVE-2018-18873 · GHSA-q86v-48q4-7hr6
An issue was discovered in JasPer 2.0.14.
Priority LOW 28
An issue was discovered in JasPer 2.0.14.