PT-2025-32530
CVE-2025-8837
·
Published
2025-08-11
·
Updated
2026-10-20
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
JasPer versions up to 4.2.5
Description:
A use-after-free vulnerability exists in JasPer up to version 4.2.5. The issue affects the
jpc dec dump function within the JPEG2000 File Handler component, located in the file src/libjasper/jpc/jpc dec.c. Exploitation requires local access. The exploit for this issue has been publicly disclosed.Recommendations:
Apply the patch named 8308060d3fbc1da10353ac8a95c8ea60eba9c25a to resolve this issue.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾