CVE-2018-19542

An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function jp2_decode in libjasper/jp2/jp2_dec.c, leading to a denial of service.

CVSS 3.0

6.5CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

1.9% chance of exploitation in the next 30 days; higher than 80% of CVEs (scores of 2026-10-25)

CWE

CWE-476

Published

2018-11-26

Modified

2026-10-15

Record from

the NVD, synced 2026-10-19

Affected

• canonical:ubuntu_linux
• debian:debian_linux
• jasper_project:jasper
• opensuse:leap
• suse:linux_enterprise_desktop
• suse:linux_enterprise_server

References

• http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00004.html
• https://github.com/mdadams/jasper/issues/182
• https://lists.debian.org/debian-lts-announce/2019/01/msg00003.html
• https://www.oracle.com/security-alerts/cpuapr2020.html
• http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00004.html

Check your stackJSON