The jp2_colr_destroy function in libjasper/jp2/jp2_cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (NULL pointer dereference).
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 23, 2017 |
| Debian | — | Upgrade jasper | Mar 31, 2017 | Nov 5, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade jasper-libs | Apr 16, 2020 | Mar 23, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade jasper-libs | Nov 19, 2019 | Mar 23, 2017 |
| Suse | — | Upgrade libjasper-32bitUpgrade libjasper4Upgrade libjasperUpgrade libjasper-develUpgrade libjasper-x86Upgrade libjasper1Upgrade libjasper1-32bit | Nov 7, 2016 | Nov 5, 2016 |
| Ubuntu | — | Upgrade libjasper1 | Jul 3, 2018 | Nov 5, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub