CVE-2021-3467

State: Published
Severity: Not scored
Published: Mar 25, 2021
Updated: Aug 3, 2024
Reserved: Mar 24, 2021

Description

A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.26 handled component references in CDEF box in the JP2 image format decoder. A specially crafted JP2 image file could cause an application using the Jasper library to crash when opened.

Scores

The record has no CVSS score.

Weaknesses

CWE-476

Affected Products

Product	Versions
jaspern/a	jasper 2.0.26Affected

References

https://bugzilla.redhat.com/show_bug.cgi?id=1942097
FEDORA-2021-2213a29364vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.