CVE-2021-3443CWE-476

A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.27 handled component references in the JP2 image format decoder

published March 25, 2021

CVSS
—
EPSS
1%
Percentile
54.9
In the wild
Unconfirmed
What it is

A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.27 handled component references in the JP2 image format decoder. A specially crafted JP2 image file could cause an application using the Jasper library to crash when opened.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00762 · 54.9th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2021-03-25T18:45Z
EPSS history
Timeline
  • 25 MAR 18:45Z
    A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.27 handled component references in the JP2 image format decoder
    cvelistv5