CVE-2018-19540

A vulnerability was found in JasPer due to a heap-based buffer overflow caused by improper bounds checking in the jas_icctxtdesc_input function within libjasper/base/jas_icc.c, a attacker could exploit this flaw by persuading a victim to open a specially crafted file, potentially overflowing a buffer and either executing arbitrary code on the system or causing the application to crash.

This vulnerability was rated as a LOW severity because it can be exploited by a remote attacker to execute arbitrary code or crash the application, it does not directly compromise the system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.