jp2_decode in jp2/jp2_dec.c in libjasper in JasPer 2.0.24 has a heap-based buffer over-read when there is an invalid relationship between the number of channels and the number of image components.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-jasper-develalma-upgrade-jasper-libs | May 4, 2022 | Jan 27, 2021 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-jasperamazon-linux-ami-2-upgrade-jasper-debuginfoamazon-linux-ami-2-upgrade-jasper-develamazon-linux-ami-2-upgrade-jasper-libsamazon-linux-ami-2-upgrade-jasper-utils | Apr 21, 2023 | Jan 27, 2021 | |
| Amazon_linux | — | amazon-linux-upgrade-jasper | Apr 21, 2023 | Jan 27, 2021 |
| Centos_linux | — | centos-upgrade-jasper-debuginfocentos-upgrade-jasper-debugsourcecentos-upgrade-jasper-libscentos-upgrade-jasper-libs-debuginfocentos-upgrade-jasper-utils-debuginfo | Nov 10, 2021 | Jan 27, 2021 |
| Freebsd | freebsd-upgrade-package-jasper | Mar 4, 2021 | Mar 3, 2021 | |
| Oracle_linux | — | oracle-linux-upgrade-jasper-develoracle-linux-upgrade-jasper-libs | Nov 17, 2021 | Jan 27, 2021 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-jasper-debuginforedhat-upgrade-jasper-debugsourceredhat-upgrade-jasper-develredhat-upgrade-jasper-libsredhat-upgrade-jasper-libs-debuginforedhat-upgrade-jasper-utils-debuginfo | Nov 10, 2021 | Jan 27, 2021 | |
| Rocky_linux | rocky-upgrade-jasper-debuginforocky-upgrade-jasper-develrocky-upgrade-jasper-libsrocky-upgrade-jasper-libs-debuginfo | Mar 12, 2024 | Jan 27, 2021 | |
| Suse | — | suse-upgrade-jaspersuse-upgrade-libjaspersuse-upgrade-libjasper-32bitsuse-upgrade-libjasper-develsuse-upgrade-libjasper1suse-upgrade-libjasper1-32bitsuse-upgrade-libjasper4suse-upgrade-libjasper4-32bit | Feb 17, 2021 | Jan 27, 2021 |
| Ubuntu | no-fix-ubuntu-package | Jun 26, 2025 | Jan 27, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub