A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.27 handled component references in the JP2 image format decoder. A specially crafted JP2 image file could cause an application using the Jasper library to crash when opened.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-jasperamazon-linux-ami-2-upgrade-jasper-debuginfoamazon-linux-ami-2-upgrade-jasper-develamazon-linux-ami-2-upgrade-jasper-libsamazon-linux-ami-2-upgrade-jasper-utils | Apr 21, 2023 | Mar 25, 2021 | |
| Amazon_linux | — | amazon-linux-upgrade-jasper | Apr 21, 2023 | Mar 25, 2021 |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-jasper-libs | Sep 16, 2021 | Mar 25, 2021 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-jasper-libs | Apr 30, 2021 | Mar 25, 2021 | |
| Redhat_linux | — | no-fix-redhat-rpm-package | Jul 9, 2025 | Mar 25, 2021 |
| Suse | — | suse-upgrade-jaspersuse-upgrade-libjasper-develsuse-upgrade-libjasper1suse-upgrade-libjasper1-32bitsuse-upgrade-libjasper4suse-upgrade-libjasper4-32bit | Oct 26, 2022 | Mar 25, 2021 |
| Ubuntu | no-fix-ubuntu-package | Jun 26, 2025 | Mar 25, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub