CVE-2007-2721

no score yetEPSS 2.3%

The jpc_qcx_getcompparms function in jpc/jpc_cs.c for the JasPer JPEG-2000 library (libjasper) before 1.900 allows remote user-assisted attackers to cause a denial of service (crash) and possibly corrupt the heap via malformed image files, as originally demonstrated using imagemagick convert.

EPSS: 2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
Published: 2007-05-16
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

jasper_jpeg-2000:jasper_jpeg-2000

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413033
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413041
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413041%3Bmsg=88
http://osvdb.org/36137
http://secunia.com/advisories/25287

Check your stack JSON