DeutschShown in its original language — a full translation is planned for a future version.
JasPer: Mehrere Schwachstellen
view advisory published 2025-08-10
Ein lokaler Angreifer kann mehrere Schwachstellen in JasPer ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder andere nicht näher definierte Angriffe durchzuführen, möglicherweise um beliebigen Code auszuführen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-8837US | high7.8 | — | ||
A vulnerability was identified in JasPer up to 4.2.5. This affects the function jpc_dec_dump of the file src/libjasper/jpc/jpc_dec.c of the component JPEG2000 File Handler. The man… | ||||
| CVE-2025-8836US | — | — | ||
A vulnerability was determined in JasPer up to 4.2.5. Affected by this issue is the function jpc_floorlog2 of the file src/libjasper/jpc/jpc_enc.c of the component JPEG2000 Encoder… | ||||
| CVE-2025-8835US | medium5.5 | — | ||
A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jas_image_chclrspc of the file src/libjasper/base/jas_image.c of the component Image… | ||||
02
references
External citations — patches, advisories, analysis.
- CVE-2025-8835external
- CVE-2025-8836external
- CVE-2025-8837external
- GitHub Security Advisory vom 2025-08-10external
- GitHub Advisory Database vom 2025-08-10external
- PoC vom 2025-08-10external
- openSUSE Security Update OPENSUSE-SU-2025:15448-1 vom 2025-08-16external
- openSUSE Security Update OPENSUSE-SU-2026:20138-1 vom 2026-02-03external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan