The jp2_colr_destroy function in libjasper/jp2/jp2_cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (NULL pointer dereference).
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 23, 2017 |
| Debian | — | Upgrade jasper | Mar 31, 2017 | Nov 5, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade jasper-libs | Apr 16, 2020 | Mar 23, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade jasper-libs | Nov 19, 2019 | Mar 23, 2017 |
| Suse | — | Upgrade libjasperUpgrade libjasper-32bitUpgrade libjasper4Upgrade libjasper-develUpgrade libjasper1-32bitUpgrade libjasper1Upgrade libjasper-x86 | Nov 7, 2016 | Nov 5, 2016 |
| Ubuntu | — | Upgrade libjasper1 | Jul 3, 2018 | Nov 5, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub