Description (CNA)
A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.26 handled component references in CDEF box in the JP2 image format decoder. A specially crafted JP2 image file could cause an application using the Jasper library to crash when opened.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / jasper | affected jasper 2.0.26 |
CWE
CWE-476
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1942097
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KWAIUFNIUCGS2IMGGDTWZIUIY7BNLGKF/
ADP enrichment
No English description supplied.