CVE-2021-3467

Name of the Vulnerable Software and Affected Versions: Jasper versions prior to 2.0.26

Description: A NULL pointer dereference flaw was found in the way Jasper handled component references in CDEF box in the JP2 image format decoder. A specially crafted JP2 image file could cause an application using the Jasper library to crash when opened.

Recommendations: For Jasper versions prior to 2.0.26, update to version 2.0.26 or later to resolve the issue. As a temporary workaround, consider avoiding the use of JP2 image files with applications that utilize the Jasper library until a patch is applied.