CVE-2018-18873
jasper: NULL pointer dereference in ras_putdatastd() in ras_enc.c
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 31, 2018
Updated · June 27, 2026
Description
A vulnerability was found in Jasper where, a denial of service caused by a NULL pointer dereference in the ras_putdatastd function within ras/ras_enc.c, caused by specially crafted file which can trigger this issue, leading the application to crash.
Statement
This vulnerability is rated as a LOW severity because it does not compromise confidentiality or integrity, it can impact the availability of the system by causing a temporary denial of service.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-476 · NULL Pointer Dereference