CVE-2021-3467 log
| Source |
|
| Severity | Low |
| Remote | No |
| Type | Denial of service |
| Description | A NULL pointer dereference security issue was reported in JasPer 2.0.25 in the JP2 decoder. The problem is related to insufficient validation of component references from CDEF boxes in the jp2_decode() function in src/libjasper/jp2/jp2_dec.c. The issue is fixed in JasPer 2.0.26. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-1692 | jasper | 2.0.25-1 | 2.0.27-1 | Low | Fixed |