Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.5

Jasper Image Library: Crashes when processing certain images

CVE-2021-26927 · published 5 years ago
Summary

A security issue in Jasper's image processing code can cause the application to crash and become unresponsive. This affects systems using Jasper 2.0.24 or earlier. Update to Jasper version 2.0.25 or later to prevent this issue.

What to do
  • Update jasper_project jasper to version 2.0.25 or later.
Affected software
VendorProductAffected versions
jasper_project jasper < 2.0.25
cpe:2.3:a:jasper_project:jasper:*:*:*:*:*:*:*:*
fedoraproject fedora 32
33
34
cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
Original advisory text
A flaw was found in jasper before 2.0.25. A null pointer dereference in jp2_decode in jp2_dec.c may lead to program crash and denial of service.
A flaw was found in jasper before 2.0.25. A null pointer dereference in jp2_decode in jp2_dec.c may lead to program crash and denial of service.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.5 Medium
Exploitation
1% chance of attack within 30 days
Type
CWE-476NULL Pointer Dereference
Timeline
Published23 Feb 2021
Updated4 Nov 2026
First seen11 Apr 2026
Sources
CVE-2021-26927 · OSV
CVE-2021-26927 · NVD
Track software like this
Free during beta