Skip to content
OpenAdvisories
Unscored USN-4688-1 4 CVEs

jasper vulnerabilities

Published Jan 11, 2021 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Jasper incorrectly certain files.
An attacker could possibly use this issue to cause a crash.
(CVE-2018-18873)

It was discovered that Jasper incorrectly handled certain files.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2018-19542)

It was discovered that Jasper incorrectly handled certain JPC encoders.
An attacker could possibly use this issue to execute arbitrary code.
(CVE-2020-27828)

It was discovered that Jasper incorrectly handled certain images.
An attacker could possibly use this issue to expose sensitive information
or cause a crash.
(CVE-2017-9782)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS jasper 1.900.1-debian1-2.4ubuntu1.3

Vulnerabilities 4

  • Unscored —
    CVE-2017-9782

    JasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) …

    jasper Ubuntu
  • Unscored —
    CVE-2018-18873

    An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function ras_putdatastd in ras/ras…

    jasper Ubuntu
  • Unscored —
    CVE-2018-19542

    An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function jp2_decode in libjasper/j…

    jasper Ubuntu
  • Unscored —
    CVE-2020-27828

    There's a flaw in jasper's jpc encoder in versions prior to 2.0.23. Crafted input provided to jasper by an attacker cou…

    jasper Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2017-9782
  • report
    https://ubuntu.com/security/CVE-2018-18873
  • report
    https://ubuntu.com/security/CVE-2018-19542
  • report
    https://ubuntu.com/security/CVE-2020-27828