CVE Database›Document archive›CVE-2018-18873

CVE-2018-18873

jasper: NULL pointer dereference in ras_putdatastd() in ras_enc.c

Loading…

Severity

Low

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · October 31, 2018

Updated · June 27, 2026

Description

A vulnerability was found in Jasper where, a denial of service caused by a NULL pointer dereference in the ras_putdatastd function within ras/ras_enc.c, caused by specially crafted file which can trigger this issue, leading the application to crash.

Statement

This vulnerability is rated as a LOW severity because it does not compromise confidentiality or integrity, it can impact the availability of the system by causing a temporary denial of service.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-476 · NULL Pointer Dereference