OESA-2026-4180

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-4180

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2026-4180.json

JSON Data

https://api.test.osv.dev/v1/vulns/OESA-2026-4180

Upstream

CVE-2025-8837

Published

2026-09-30T13:47:21Z

Modified

2026-10-01T02:00:05Z

Severity

7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

jasper security update

Details

The JasPer Project is an open-source initiative to provide a free software-based reference implementation of the codec specified in the JPEG-2000 Part-1 standard.

Security Fix(es):

A vulnerability was identified in JasPer up to 4.2.5. This affects the function jpc_dec_dump of the file src/libjasper/jpc/jpc_dec.c of the component JPEG2000 File Handler. The manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The patch is named 8308060d3fbc1da10353ac8a95c8ea60eba9c25a. It is recommended to apply a patch to fix this issue.(CVE-2025-8837)

Database specific

{
    "severity": "High"
}

References

Affected packages

openEuler:24.03-LTS-SP3 / jasper

Package

Name: jasper
Purl: pkg:rpm/openEuler/jasper&distro=openEuler-24.03-LTS-SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.1.0-5.oe2403sp3

Ecosystem specific

{
    "aarch64": [
        "jasper-4.1.0-5.oe2403sp3.aarch64.rpm",
        "jasper-debuginfo-4.1.0-5.oe2403sp3.aarch64.rpm",
        "jasper-debugsource-4.1.0-5.oe2403sp3.aarch64.rpm",
        "jasper-devel-4.1.0-5.oe2403sp3.aarch64.rpm",
        "jasper-help-4.1.0-5.oe2403sp3.aarch64.rpm",
        "jasper-utils-4.1.0-5.oe2403sp3.aarch64.rpm"
    ],
    "src": [
        "jasper-4.1.0-5.oe2403sp3.src.rpm"
    ],
    "x86_64": [
        "jasper-4.1.0-5.oe2403sp3.x86_64.rpm",
        "jasper-debuginfo-4.1.0-5.oe2403sp3.x86_64.rpm",
        "jasper-debugsource-4.1.0-5.oe2403sp3.x86_64.rpm",
        "jasper-devel-4.1.0-5.oe2403sp3.x86_64.rpm",
        "jasper-help-4.1.0-5.oe2403sp3.x86_64.rpm",
        "jasper-utils-4.1.0-5.oe2403sp3.x86_64.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2026-4180.json"