Skip to content
OpenAdvisories
Medium WID-SEC-2025-1755 3 CVEs

JasPer: Mehrere Schwachstellen

Published Aug 10, 2025 · Updated Feb 3, 2026 · Revision 7 · de-DE

Vendor: SUSE Product: Linux Product: openSUSE Platform: Windows

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in JasPer ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder andere nicht näher definierte Angriffe durchzuführen, möglicherweise um beliebigen Code auszuführen.

Product

JasPer ist eine Implementation des JPEG 2000 Part 1 Komprimierungsstandards.

Vulnerabilities 3

  • Medium 5.3
    CVE-2025-8837

    JasPer JPEG2000 File jpc_dec.c jpc_dec_dump use after free

    A vulnerability was identified in JasPer up to 4.2.5. This affects the function jpc_dec_dump of the file src/libjasper/jpc/jpc_dec.c of the component JPEG2000 File Handler. The manipulation leads to use after free. An attack has to be approached locally. The …

    jasper jasper Ubuntu Azure Linux
  • Low 3.3
    CVE-2025-8835

    JasPer Image Color Space Conversion jas_image.c jas_image_chclrspc null pointer dereference

    A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jas_image_chclrspc of the file src/libjasper/base/jas_image.c of the component Image Color Space Conversion Handler. The manipulation leads to null pointer derefer…

    jasper jasper Ubuntu Azure Linux
  • Low 3.3
    CVE-2025-8836

    JasPer JPEG2000 Encoder jpc_enc.c jpc_floorlog2 assertion

    A vulnerability was determined in JasPer up to 4.2.5. Affected by this issue is the function jpc_floorlog2 of the file src/libjasper/jpc/jpc_enc.c of the component JPEG2000 Encoder. The manipulation leads to reachable assertion. The attack needs to be approac…

    jasper jasper Ubuntu Azure Linux

Revision history

  1. #7

    Neue Updates von SUSE und openSUSE aufgenommen

  2. #6

    Neue Updates von SUSE aufgenommen

  3. #5

    Neue Updates von SUSE aufgenommen

  4. #4

    Neue Updates von SUSE aufgenommen

  5. #3

    Neue Updates von openSUSE aufgenommen

  6. #2

    Referenz(en) aufgenommen: EUVD-2025-24129, EUVD-2025-24133, EUVD-2025-24131

  7. #1

    Initiale Fassung

References