CVE-2020-27828

Name of the Vulnerable Software and Affected Versions jasper versions prior to 2.0.23

Description The issue is related to a flaw in jasper's jpc encoder. Crafted input provided to jasper by an attacker could cause an arbitrary out-of-bounds write, potentially affecting data confidentiality, integrity, or application availability.

Recommendations For versions prior to 2.0.23, update to version 2.0.23 or later to resolve the issue. As a temporary workaround, consider restricting the input to the jpc encoder to prevent crafted input from causing an arbitrary out-of-bounds write.