CVE-2021-3272

5.5

MEDIUMCVSS v3

Published

January 27, 2021

CVSS v2

4.3 MEDIUM

Affected

11 projects

Assigned by

MITRE

Severity scale

010

Description

jp2_decode in jp2/jp2_dec.c in libjasper in JasPer 2.0.24 has a heap-based buffer over-read when there is an invalid relationship between the number of channels and the number of image components.

jasper-software/jasper

GitHubOfficial Repository for the JasPer Image Coding Toolkit

= 2.0.24NVD

fedora

Crates.ioBase library for interacting with Fedora web services

= 32, = 33NVD

fedora

Python Package Index

More on this CVE

NVD↗GitHub Advisory↗

Placeholder for the fedora name

= 32, = 33NVD

fedora

Docker HubOfficial Docker builds of Fedora

= 32, = 33NVD

fedora

NPMDigital Repository Ireland - fedora backend operations

= 32, = 33NVD

fedora

RubyGemsSet of capistrano recipies for automating creation of Fedora servers.

= 32, = 33NVD

Jasper

Python Package IndexAn asynchronous behavior-driven development framework

= 2.0.24NVD

jasper

NPMjasper template engine

= 2.0.24NVD

Jasper

NuGet GalleryIn-memory command bus and asynchronous messaging framework

= 2.0.24NVD

tylerlaberge/Jasper

GitHubAn asynchronous behavior-driven development framework.

= 2.0.24NVD

jasper

RubyGemsJasper is an open source video management system for Ruby on Rails.

= 2.0.24NVD

Security Advisories

CVE-2021-3272

Description

More on this CVE