Multiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via a crafted image file, related to integer multiplication for memory allocation.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade netpbm-progsUpgrade netpbmUpgrade netpbm-devel | Dec 1, 2016 | Oct 2, 2008 |
| Debian | — | Upgrade ghostscript | Jul 30, 2024 | Oct 2, 2008 |
| Freebsd | — | Upgrade jasper | Dec 10, 2025 | Apr 18, 2013 |
| Gentoo Linux | — | Upgrade media-libs/jasper. | Oct 30, 2017 | Oct 2, 2008 |
| Oracle_linux | — | Upgrade netpbm-develUpgrade netpbmUpgrade netpbm-progs | Oct 16, 2024 | Oct 2, 2008 |
| Suse | — | Upgrade libjasper-develUpgrade libjasper-x86Upgrade libjasper-32bitUpgrade libjasperUpgrade suse-releaseUpgrade libjasper-64bitUpgrade jasper | Dec 12, 2013 | Oct 2, 2008 |
| Ubuntu | — | Upgrade libgs8Upgrade libjasper-1.701-1Upgrade libjasper1 | Nov 8, 2024 | Oct 2, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub