The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
jp2_decode in jp2/jp2_dec.c in libjasper in JasPer 2.0.24 has a heap-based buffer over-read when there is an invalid relationship between the number of channels and the number of image components.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade jasper-develUpgrade jasper-libs | May 4, 2022 | Jan 27, 2021 |
| Amazon Linux Ami 2 | — | Upgrade jasper-utilsUpgrade jasper-develUpgrade jasper-libsUpgrade jasperUpgrade jasper-debuginfo | Apr 21, 2023 | Jan 27, 2021 |
| Amazon_linux | — | Upgrade jasper | Apr 21, 2023 | Jan 27, 2021 |
| Centos_linux | — | Upgrade jasper-libs-debuginfoUpgrade jasper-libsUpgrade jasper-utils-debuginfoUpgrade jasper-debuginfoUpgrade jasper-debugsource | Nov 10, 2021 | Jan 27, 2021 |
| Freebsd | — | Upgrade jasper | Mar 4, 2021 | Mar 3, 2021 |
| Oracle_linux | — | Upgrade jasper-develUpgrade jasper-libs | Nov 17, 2021 | Jan 27, 2021 |
| Redhat_linux | — | Upgrade jasper-libsNo solution existsUpgrade jasper-libs-debuginfoUpgrade jasper-debuginfoUpgrade jasper-debugsourceUpgrade jasper-develUpgrade jasper-utils-debuginfo | Nov 10, 2021 | Jan 27, 2021 |
| Rocky_linux | — | Upgrade jasper-debuginfoUpgrade jasper-libsUpgrade jasper-libs-debuginfoUpgrade jasper-devel | Mar 12, 2024 | Jan 27, 2021 |
| Suse | — | Upgrade libjasper4-32bitUpgrade libjasperUpgrade libjasper4Upgrade libjasper-32bitUpgrade libjasper1Upgrade jasperUpgrade libjasper1-32bitUpgrade libjasper-devel | Feb 17, 2021 | Jan 27, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jan 27, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub