https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T08:26:19.924953+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:4235 ALSA-2021:4235 — Moderate: jasper security update 2026-10-04T08:26:19.946806+00:00

Affected: AlmaLinux:8: jasper-devel, AlmaLinux:8: jasper-libs

JasPer is an implementation of Part 1 of the JPEG 2000 image compression standard.

Security Fix(es):

* jasper: Heap-based buffer overflow in cp_create() in jpc_enc.c (CVE-2020-27828)

* jasper: Heap-based buffer over-read in jp2_decode() in jp2_dec.c (CVE-2021-3272)

* jasper: Out of bounds read in jp2_decode() in jp2_dec.c (CVE-2021-26926)

* jasper: NULL pointer dereference in jp2_decode() in jp2_dec.c (CVE-2021-26927)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/cnvd-2021-13670 cnvd-2021-13670 2026-10-04T08:26:19.946991+00:00 cnvd-2021-13670 https://cve.radiocsirt.org/vuln/euvd-2026-25240 EUVD-2026-25240 2026-10-04T08:26:19.947014+00:00 EUVD-2026-25240 https://cve.radiocsirt.org/vuln/fkie_cve-2021-26927 fkie_cve-2021-26927 2026-10-04T08:26:19.947027+00:00

A flaw was found in jasper before 2.0.25. A null pointer dereference in jp2_decode in jp2_dec.c may lead to program crash and denial of service.

 https://cve.radiocsirt.org/vuln/ghsa-9768-8435-chr8 GHSA-9768-8435-chr8 2026-10-04T08:26:19.947050+00:00

A flaw was found in jasper before 2.0.25. A null pointer dereference in jp2_decode in jp2_dec.c may lead to program crash and denial of service.

 https://cve.radiocsirt.org/vuln/gsd-2021-26927 gsd-2021-26927 2026-10-04T08:26:19.947067+00:00 gsd-2021-26927 https://cve.radiocsirt.org/vuln/msrc_cve-2021-26927 msrc_CVE-2021-26927 — A flaw was found in jasper before 2.0.25. A null pointer dereference in jp2_decode in jp2_dec.c may lead to program cra… 2026-10-04T08:26:19.947078+00:00 msrc_CVE-2021-26927 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13389-1 openSUSE-SU-2024:13389-1 — jasper-4.0.0-2.1 on GA media 2026-10-04T08:26:19.947099+00:00

jasper-4.0.0-2.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2022:1475-1 SUSE-SU-2022:1475-1 — Security update for jasper 2026-10-04T08:26:19.947115+00:00

Security update for jasper

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-26927 UBUNTU-CVE-2021-26927 2026-10-04T08:26:19.947130+00:00

Affected: Ubuntu:16.04:LTS: jasper

A flaw was found in jasper before 2.0.25. A null pointer dereference in jp2_decode in jp2_dec.c may lead to program crash and denial of service.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1046 WID-SEC-W-2023-1046 — JasPer: Mehrere Schwachstellen 2026-10-04T08:26:19.947148+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JasPer ausnutzen, um einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.