CVE Database›Document archive›CVE-2018-9055

CVE-2018-9055

jasper: reachable assertion in jpc_firstone() in jpc_math.c

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.0

Review impact separately from score.

Published · March 26, 2018

Updated · June 27, 2026

Description

A vulnerability was found in Jasper due to a flaw in the jpc_firstone function within libjasper/jpc/jpc_math.c, where a local attacker using an assertion, potentially causing the application to crash and resulting in a denial of service.

Statement

This vulnerability is rated as a Moderate vulnerability because it allows denial of service due to reachable asseration in jpc_firstone fundtion within libjasper/jpc/jpc_math.c. Exploiting this issue could cause an application crash when processing crafted input, this vulnerability affects the availability of application.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.0 · 5.5
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-617 · Reachable Assertion