4.8
Medium
CVE-2025-8837 A vulnerability was identified in JasPer up to 4.2.5
Description
A vulnerability was identified in JasPer up to 4.2.5. This affects the function jpc_dec_dump of the file src/libjasper/jpc/jpc_dec.c of the component JPEG2000 File Handler. The manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The patch is named 8308060d3fbc1da10353ac8a95c8ea60eba9c25a. It is recommended to apply a patch to fix this issue.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| jasper 4.2 | 4.2.0 → 4.2.5 | No fix stated |
References
- VDB-319371 | JasPer JPEG2000 File jpc_dec.c jpc_dec_dump use after free vuldb.com
- VDB-319371 | CTI Indicators (IOB, IOC, IOA) vuldb.com
- Submit #630487 | jasper imginfo JasPer Version**: 4.2.5 and the newest master Use-after-free vuldb.com
- Submit #630488 | jasper imginfo JasPer Version**: 4.2.5 and the newest master Use-after-free (Duplicate) vuldb.com
- github.com github.com
- drive.google.com drive.google.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of jasper
The 9 CVEs of jasper →
CVE-2025-8836
A vulnerability was determined in JasPer up to 4.2.5
4.8
Medium
CVE-2025-8835
A vulnerability was found in JasPer up to 4.2.5
4.8
Medium
CVE-2022-2963
A vulnerability found in jasper
7.5
High
CVE-2021-3467
A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.26 handled component references in…
Not rated