CVE-2018-19543

An issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the function jp2_decode in libjasper/jp2/jp2_dec.c.

CVSS 3.0

7.8CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

1.6% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-25)

CWE

CWE-125

Published

2018-11-26

Modified

2026-10-15

Record from

the NVD, synced 2026-10-19

Affected

• canonical:ubuntu_linux
• debian:debian_linux
• jasper_project:jasper
• suse:linux_enterprise_desktop
• suse:linux_enterprise_server

References

• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html
• https://github.com/mdadams/jasper/issues/182
• https://www.oracle.com/security-alerts/cpuapr2020.html
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html

Check your stackJSON