Search for packages
Package details: pkg:alpm/archlinux/jasper@2.0.24-1
purl pkg:alpm/archlinux/jasper@2.0.24-1
Next non-vulnerable version 2.0.28-1
Latest non-vulnerable version 2.0.28-1
Risk 3.2
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-re9t-e26v-bfhy
Aliases:
CVE-2021-26926
A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2_decode function whic may lead to disclosure of information or program crash.
2.0.25-1
Affected by 1 other vulnerability.
VCID-txtx-rquq-yyat
Aliases:
CVE-2021-26927
A flaw was found in jasper before 2.0.25. A null pointer dereference in jp2_decode in jp2_dec.c may lead to program crash and denial of service.
2.0.25-1
Affected by 1 other vulnerability.
VCID-udrk-rk3p-kfc9
Aliases:
CVE-2021-3272
jp2_decode in jp2/jp2_dec.c in libjasper in JasPer 2.0.24 has a heap-based buffer over-read when there is an invalid relationship between the number of channels and the number of image components.
2.0.25-1
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-ehe3-1rss-hfak There's a flaw in jasper's jpc encoder in versions prior to 2.0.23. Crafted input provided to jasper by an attacker could cause an arbitrary out-of-bounds write. This could potentially affect data confidentiality, integrity, or application availability. CVE-2020-27828

Date Actor Action Vulnerability Source VulnerableCode Version
2025-07-31T11:38:05.846697+00:00 Arch Linux Importer Fixing VCID-ehe3-1rss-hfak https://security.archlinux.org/AVG-1331 37.0.0
2025-07-31T11:38:02.897142+00:00 Arch Linux Importer Affected by VCID-re9t-e26v-bfhy https://security.archlinux.org/AVG-1497 37.0.0
2025-07-31T11:38:02.869698+00:00 Arch Linux Importer Affected by VCID-txtx-rquq-yyat https://security.archlinux.org/AVG-1497 37.0.0
2025-07-31T11:38:02.843207+00:00 Arch Linux Importer Affected by VCID-udrk-rk3p-kfc9 https://security.archlinux.org/AVG-1497 37.0.0