MGASA-2021-0249: jasper Mageia
Vulnerability summary
MGASA-2021-0249 is a vulnerability in jasper Mageia with no CVSS score yet.
Advisory lineage
Upstream 2 · Downstream 0Timeline
- 13-06-2021PublishedVulnerability first disclosed.
- 16-04-2026Last modifiedVulnerability information updated.
Description
Updated jasper packages fix security vulnerabilities A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.27 handled component references in the JP2 image format decoder. A specially crafted JP2 image file could cause an application using the Jasper library to crash when opened (CVE-2021-3443). A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.26 handled component references in CDEF box in the JP2 image format decoder. A specially crafted JP2 image file could cause an application using the Jasper library to crash when opened (CVE-2021-3467).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Mageia3 products
- jasper< 2.0.27-1.mga7
- jasper< 2.0.27-1.mga8
- mingw-jasper< 2.0.27-1.mga8
1 vendor · 3 products