CVE-2018-19541

A vulnerability was found in Jasper due to a heap-based buffer overflow caused by improper bounds checking in the jas_image_depalettize function within libjasper/base/jas_image.c, an attacker could exploit this flaw by persuading a victim to open a specially crafted file, which could overflow a buffer and potentially allow arbitrary code execution or cause the application to crash.

This vulnerability was rated as LOW severity because it requires a victim to open a specially crafted file, it doesn't allow full system compromise, it could cause the application to crash or potentially lead to a buffer overflow.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.