CVE-2018-19543

A vulnerability was found in Jasper due to a heap-based buffer overflow caused by improper bounds checking in the jp2_decode function within libjasper/jp2/jp2_dec.c, an attacker could exploit this flaw by persuading a victim to open a specially crafted file, leading to a buffer overflow that could execute arbitrary code on the system or cause the application to crash.

This vulnerability was rated as LOW severity because it requires the victim to open a specially crafted file, it may lead to a buffer overflow that could cause the application to crash, it does not pose a direct threat of system compromise.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.