CVE-2021-3467CWE-476

A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.26 handled component references in CDEF box in the JP2 image format decoder

published March 25, 2021

CVSS
—
EPSS
1%
Percentile
49.5
In the wild
Unconfirmed
What it is

A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.26 handled component references in CDEF box in the JP2 image format decoder. A specially crafted JP2 image file could cause an application using the Jasper library to crash when opened.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00629 · 49.5th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2021-03-25T18:45Z
EPSS history
Timeline
  • 25 MAR 18:45Z
    A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.26 handled component references in CDEF box in the JP2 image format decoder
    cvelistv5