Approved changes feed: RSS · Atom

cpe:2.3:a:jasper_project:jasper:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJasper Project (3a2d8c85-e82f-599d-b557-c7abebec2975)
ProductJasper (5de3cd7f-c39a-54ce-a31e-151b54b00db7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/jasper-software/jasper purl2cpe 2026-06-01 10:13:20.584296

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-8837 vulnerable 2026-06-08 07:45:21.297016 JasPer JPEG2000 File jpc_dec.c jpc_dec_dump use after free
MEDIUM (5.3)
A vulnerability was identified in JasPer up to 4.2.5. This affects the function jpc_dec_dump of the file src/libjasper/jpc/jpc_dec.c of the component JPEG2000 File Handler. The manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The patch is named 8308060d3fbc1da10353ac8a95c8ea60eba9c25a. It is recommended to apply a patch to fix this issue.
Published: 2025-08-11T08:02:07.784Z
Updated: 2025-08-11T19:56:29.410Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8836 vulnerable 2026-06-08 07:45:21.296454 JasPer JPEG2000 Encoder jpc_enc.c jpc_floorlog2 assertion
LOW (3.3)
A vulnerability was determined in JasPer up to 4.2.5. Affected by this issue is the function jpc_floorlog2 of the file src/libjasper/jpc/jpc_enc.c of the component JPEG2000 Encoder. The manipulation leads to reachable assertion. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The patch is identified as 79185d32d7a444abae441935b20ae4676b3513d4. It is recommended to apply a patch to fix this issue.
Published: 2025-08-11T07:32:08.430Z
Updated: 2025-08-12T13:44:11.473Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8835 vulnerable 2026-06-08 07:45:21.295821 JasPer Image Color Space Conversion jas_image.c jas_image_chclrspc null pointer dereference
LOW (3.3)
A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jas_image_chclrspc of the file src/libjasper/base/jas_image.c of the component Image Color Space Conversion Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The identifier of the patch is bb7d62bd0a2a8e0e1fdb4d603f3305f955158c52. It is recommended to apply a patch to fix this issue.
Published: 2025-08-11T07:02:07.422Z
Updated: 2025-08-12T13:46:19.331Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51257 vulnerable 2026-06-08 06:16:17.301489 Details available
An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code.
Published: 2024-01-16T00:00:00.000Z
Updated: 2025-11-04T22:05:25.530Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3467 vulnerable 2026-06-08 05:33:52.382849 Details available
A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.26 handled component references in CDEF box in the JP2 image format decoder. A specially crafted JP2 image file could cause an application using the Jasper library to crash when opened.
Published: 2021-03-25T18:45:41.000Z
Updated: 2024-08-03T16:53:17.550Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3443 vulnerable 2026-06-08 05:33:52.038668 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27845 vulnerable 2026-06-08 05:31:22.249867 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26927 vulnerable 2026-06-08 05:30:45.580493 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26926 vulnerable 2026-06-08 05:30:45.579922 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-27828 vulnerable 2026-06-08 05:23:53.282813 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6852 vulnerable 2026-06-08 05:09:55.029970 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6851 vulnerable 2026-06-08 05:09:55.029634 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6850 vulnerable 2026-06-08 05:09:55.029208 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14232 vulnerable 2026-06-08 05:08:49.508246 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9600 vulnerable 2026-06-08 05:08:24.110076 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9591 vulnerable 2026-06-08 05:08:24.086448 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9583 vulnerable 2026-06-08 05:08:24.069663 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9560 vulnerable 2026-06-08 05:08:24.024114 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9557 vulnerable 2026-06-08 05:08:24.022709 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9398 vulnerable 2026-06-08 05:08:23.552031 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9396 vulnerable 2026-06-08 05:08:23.547839 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9395 vulnerable 2026-06-08 05:08:23.547395 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9394 vulnerable 2026-06-08 05:08:23.546968 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9392 vulnerable 2026-06-08 05:08:23.544290 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9391 vulnerable 2026-06-08 05:08:23.543866 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9390 vulnerable 2026-06-08 05:08:23.543277 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9389 vulnerable 2026-06-08 05:08:23.542858 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9388 vulnerable 2026-06-08 05:08:23.536864 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9387 vulnerable 2026-06-08 05:08:23.536347 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9262 vulnerable 2026-06-08 05:08:23.187378 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8887 vulnerable 2026-06-08 05:08:21.996045 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8886 vulnerable 2026-06-08 05:08:21.995602 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8885 vulnerable 2026-06-08 05:08:21.995177 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8883 vulnerable 2026-06-08 05:08:21.992125 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8882 vulnerable 2026-06-08 05:08:21.991602 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8693 vulnerable 2026-06-08 05:08:14.624834 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8692 vulnerable 2026-06-08 05:08:14.624320 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8691 vulnerable 2026-06-08 05:08:14.623838 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8690 vulnerable 2026-06-08 05:08:14.623360 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8654 vulnerable 2026-06-08 05:08:14.564284 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2116 vulnerable 2026-06-08 05:07:33.202341 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1577 vulnerable 2026-06-08 05:07:31.805616 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-10251 vulnerable 2026-06-08 05:07:17.628590 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-10250 vulnerable 2026-06-08 05:07:17.628236 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-10249 vulnerable 2026-06-08 05:07:17.627886 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-10248 vulnerable 2026-06-08 05:07:17.627437 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8751 vulnerable 2026-06-08 05:07:04.803027 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5221 vulnerable 2026-06-08 05:06:49.283602 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9029 vulnerable 2026-06-08 05:06:10.659372 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8158 vulnerable 2026-06-08 05:06:08.211908 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8157 vulnerable 2026-06-08 05:06:08.211403 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8137 vulnerable 2026-06-08 05:06:08.050787 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.