CVE-2018-9055
jasper: reachable assertion in jpc_firstone() in jpc_math.c
Severity
ModerateRed Hat Product Security
CVSS 3.0
Review impact separately from score.
Published · March 26, 2018
Updated · June 27, 2026
Description
A vulnerability was found in Jasper due to a flaw in the jpc_firstone function within libjasper/jpc/jpc_math.c, where a local attacker using an assertion, potentially causing the application to crash and resulting in a denial of service.
Statement
This vulnerability is rated as a Moderate vulnerability because it allows denial of service due to reachable asseration in jpc_firstone fundtion within libjasper/jpc/jpc_math.c. Exploiting this issue could cause an application crash when processing crafted input, this vulnerability affects the availability of application.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.0 · 5.5CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-617 · Reachable Assertion