Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2025-8836

Опубликовано: 11 авг. 2025
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 1.7
CVSS3: 3.3

Описание

A vulnerability was determined in JasPer up to 4.2.5. Affected by this issue is the function jpc_floorlog2 of the file src/libjasper/jpc/jpc_enc.c of the component JPEG2000 Encoder. The manipulation leads to reachable assertion. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The patch is identified as 79185d32d7a444abae441935b20ae4676b3513d4. It is recommended to apply a patch to fix this issue.

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/xenial

needs-triage

esm-infra/xenial

ignored

end of ESM support, was needs-triage
jammy

DNE

noble

DNE

plucky

DNE

questing

DNE

resolute

DNE

upstream

needs-triage

Показывать по

EPSS

Процентиль: 10%
0.002
Низкий

1.7 Low

CVSS2

3.3 Low

CVSS3

Связанные уязвимости

CVSS3: 3.3
nvd
около 1 года назад

A vulnerability was determined in JasPer up to 4.2.5. Affected by this issue is the function jpc_floorlog2 of the file src/libjasper/jpc/jpc_enc.c of the component JPEG2000 Encoder. The manipulation leads to reachable assertion. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The patch is identified as 79185d32d7a444abae441935b20ae4676b3513d4. It is recommended to apply a patch to fix this issue.

CVSS3: 3.3
msrc
12 месяцев назад

JasPer JPEG2000 Encoder jpc_enc.c jpc_floorlog2 assertion

CVSS3: 3.3
debian
около 1 года назад

A vulnerability was determined in JasPer up to 4.2.5. Affected by this ...

CVSS3: 3.3
github
около 1 года назад

A vulnerability was determined in JasPer up to 4.2.5. Affected by this issue is the function jpc_floorlog2 of the file src/libjasper/jpc/jpc_enc.c of the component JPEG2000 Encoder. The manipulation leads to reachable assertion. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The patch is identified as 79185d32d7a444abae441935b20ae4676b3513d4. It is recommended to apply a patch to fix this issue.

suse-cvrf
7 месяцев назад

Security update for jasper

EPSS

Процентиль: 10%
0.002
Низкий

1.7 Low

CVSS2

3.3 Low

CVSS3