4.8
Medium
CVE-2025-8837 A vulnerability was identified in JasPer up to 4.2.5
Description
A vulnerability was identified in JasPer up to 4.2.5. This affects the function jpc_dec_dump of the file src/libjasper/jpc/jpc_dec.c of the component JPEG2000 File Handler. The manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The patch is named 8308060d3fbc1da10353ac8a95c8ea60eba9c25a. It is recommended to apply a patch to fix this issue.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| jasper 4.2 | 4.2.0 → 4.2.5 | No fix stated |
Other CVEs of jasper
The 9 CVEs of jasper →
CVE-2025-8836
A vulnerability was determined in JasPer up to 4.2.5
4.8
Medium
CVE-2025-8835
A vulnerability was found in JasPer up to 4.2.5
4.8
Medium
CVE-2022-2963
A vulnerability found in jasper
7.5
High
CVE-2021-3467
A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.26 handled component references in…
Not rated