CVE-2025-8836

Katalog CVE

CVSS 3.3 · Low EPSS 0,21%

Kerentanan Reachable Assertion pada jasper project jasper. Skor CVSS 3.1 3.3 (Low) menurut vuldb.com.

Deskripsi (NVD)

A vulnerability was determined in JasPer up to 4.2.5. Affected by this issue is the function jpc_floorlog2 of the file src/libjasper/jpc/jpc_enc.c of the component JPEG2000 Encoder. The manipulation leads to reachable assertion. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The patch is identified as 79185d32d7a444abae441935b20ae4676b3513d4. It is recommended to apply a patch to fix this issue.

Rincian

Terbit di NVD

11 Agustus 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

3.3 (Low), sumber vuldb.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-617: Reachable Assertion

EPSS (30 hari)

0,21% peluang dieksploitasi; lebih tinggi dari 10,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/jasper-software/jasper/issues/401 exploit · issue tracking · advisory vendor
• https://github.com/jasper-software/jasper/commit/79185d32d7a444abae441935b20ae4676b3513d4 patch
• https://vuldb.com/?id.319370 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.622409 exploit · advisory pihak ketiga · vdb entry
• https://drive.google.com/file/d/1pPgndhHh2z0lk99Wt31W-XIW3XWt8FB3/view?usp=drive_link exploit
• https://vuldb.com/?ctiid.319370 permissions required · vdb entry