Approved changes feed: RSS · Atom

cpe:2.3:a:jasper_project:jasper:2.0.14:*:*:*:*:*:*:*

part: a version: 2.0.14 update: *

VendorJasper Project (3a2d8c85-e82f-599d-b557-c7abebec2975)
ProductJasper (5de3cd7f-c39a-54ce-a31e-151b54b00db7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/jasper-software/jasper purl2cpe 2026-06-01 10:13:20.584354

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-9252 vulnerable 2026-06-08 05:12:07.976426 Details available
JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_abstorelstepsize in libjasper/jpc/jpc_enc.c.
Published: 2018-04-04T02:00:00.000Z
Updated: 2024-08-05T07:17:51.817Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-9154 vulnerable 2026-06-08 05:12:07.888428 Details available
There is a reachable abort in the function jpc_dec_process_sot in libjasper/jpc/jpc_dec.c of JasPer 2.0.14 that will lead to a remote denial of service attack by triggering an unexpected jas_alloc2 return value, a different vulnerability than CVE-2017-13745.
Published: 2018-05-04T21:00:00.000Z
Updated: 2024-08-05T07:17:51.411Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-9055 vulnerable 2026-06-08 05:12:06.844158 Details available
JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_firstone in libjasper/jpc/jpc_math.c.
Published: 2018-03-27T04:00:00.000Z
Updated: 2024-08-05T07:10:47.338Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20622 vulnerable 2026-06-08 05:11:27.642118 Details available
JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when "--output-format jp2" is used.
Published: 2018-12-31T19:00:00.000Z
Updated: 2025-05-06T16:23:14.824Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20584 vulnerable 2026-06-08 05:11:27.567507 Details available
JasPer 2.0.14 allows remote attackers to cause a denial of service (application hang) via an attempted conversion to the jp2 format.
Published: 2018-12-30T05:00:00.000Z
Updated: 2024-08-05T12:05:17.688Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20570 vulnerable 2026-06-08 05:11:27.551979 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19543 vulnerable 2026-06-08 05:11:15.858381 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19542 vulnerable 2026-06-08 05:11:15.857542 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19541 vulnerable 2026-06-08 05:11:15.856968 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19540 vulnerable 2026-06-08 05:11:15.856223 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19539 vulnerable 2026-06-08 05:11:15.855339 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19139 vulnerable 2026-06-08 05:11:15.391986 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-18873 vulnerable 2026-06-08 05:11:14.849374 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.