4.8
Moyenne
CVE-2025-8837 A vulnerability was identified in JasPer up to 4.2.5
Description
A vulnerability was identified in JasPer up to 4.2.5. This affects the function jpc_dec_dump of the file src/libjasper/jpc/jpc_dec.c of the component JPEG2000 File Handler. The manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The patch is named 8308060d3fbc1da10353ac8a95c8ea60eba9c25a. It is recommended to apply a patch to fix this issue.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| jasper 4.2 | 4.2.0 → 4.2.5 | Pas de correctif indiqué |
Autres CVE de jasper
Les 9 CVE de jasper →
CVE-2025-8836
A vulnerability was determined in JasPer up to 4.2.5
4.8
Moyenne
CVE-2025-8835
A vulnerability was found in JasPer up to 4.2.5
4.8
Moyenne
CVE-2022-2963
A vulnerability found in jasper
7.5
Élevée
CVE-2021-3467
A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.26 handled component references in…
Non notée