{"schemaVersion":3,"id":"MGASA-2021-0249","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Updated jasper packages fix security vulnerabilities\n\nA NULL pointer dereference flaw was found in the way Jasper versions before\n2.0.27 handled component references in the JP2 image format decoder. A\nspecially crafted JP2 image file could cause an application using the Jasper\nlibrary to crash when opened (CVE-2021-3443).\n\nA NULL pointer dereference flaw was found in the way Jasper versions before\n2.0.26 handled component references in CDEF box in the JP2 image format\ndecoder. A specially crafted JP2 image file could cause an application using\nthe Jasper library to crash when opened (CVE-2021-3467).","dates":{"published":"2021-06-13T21:32:39.000Z","modified":"2026-04-16T04:42:05.414Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"mageia","product":"jasper","name":"jasper","label":"jasper","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/jasper","purlType":"rpm","versions":[{"text":"< 2.0.27-1.mga7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.0.27-1.mga7","eol":null,"hubHref":null},{"vendor":"mageia","product":"jasper","name":"jasper","label":"jasper","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/jasper","purlType":"rpm","versions":[{"text":"< 2.0.27-1.mga8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.0.27-1.mga8","eol":null,"hubHref":null},{"vendor":"mageia","product":"mingw-jasper","name":"mingw-jasper","label":"mingw-jasper","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/mingw-jasper","purlType":"rpm","versions":[{"text":"< 2.0.27-1.mga8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.0.27-1.mga8","eol":null,"hubHref":null}],"affectedCount":3,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://advisories.mageia.org/MGASA-2021-0249.html","label":"advisories.mageia.org/MGASA-2021-0249.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29017","label":"bugs.mageia.org/show_bug.cgi?id=29017","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/KWAIUFNIUCGS2IMGGDTWZIUIY7BNLGKF/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["WEB"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/6OUXMOIV77VDB6PQ4K2ZRB44DQYYHIXW/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["WEB"]}],"lineage":{"upstream":["CVE-2021-3443","CVE-2021-3467"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2021-06-13T21:32:39.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-16T04:42:05.414Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T12:23:37.427Z","stale":false,"partial":false}}