CVE-2018-20622
6.5MEDIUMJasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when "--output-format jp2" is used.
Published: 12/31/2018Updated: 5/6/2025
Description
JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when "--output-format jp2" is used.
AI AnalysisPowered by AI
Affected Products
jasper_projectjasper
2.0.14
debiandebian_linux
8.0
References
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html
- http://www.securityfocus.com/bid/106373Third Party AdvisoryVDB Entry
- https://github.com/mdadams/jasper/issues/193Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2019/01/msg00003.htmlThird Party Advisory
- https://www.oracle.com/security-alerts/cpuapr2020.html
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html
- http://www.securityfocus.com/bid/106373Third Party AdvisoryVDB Entry
- https://github.com/mdadams/jasper/issues/193Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2019/01/msg00003.htmlThird Party Advisory
- https://www.oracle.com/security-alerts/cpuapr2020.html