Vulnerability · Published Mar 25, 2021 · Assigned by redhat

CVE-2021-3443

Medium 5.5

In plain English

A medium-severity null pointer dereference in jasper. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 56% of all known vulnerabilities).

Severity (CVSS NVD)5.5Medium

Exploit odds (30 days)0.8%top 44.5% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.27 handled component references in the JP2 image format decoder. A specially crafted JP2 image file could cause an application using the Jasper library to crash when opened.

Affected products (as reported)

Vendor	Product	Versions
n/a	jasper	jasper 2.0.27

Weakness: CWE-476

References

https://bugzilla.redhat.com/show_bug.cgi?id=1939233 x_refsource_MISC