Bug 2258400 (CVE-2023-51257) - CVE-2023-51257 jasper: Invalid memory write
Summary: CVE-2023-51257 jasper: Invalid memory write
Keywords:
Status: NEW
Alias: CVE-2023-51257
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 2258402 2258403
Blocks: 2258399
TreeView+ depends on / blocked
 
Reported: 2024-01-15 05:55 UTC by Rohit Keshri
Modified: 2024-01-24 08:16 UTC (History)
0 users

Fixed In Version:
Doc Type: ---
Doc Text:
A flaw in jasper was discovered where an invalid memory write occurred due to the absence of a proper range check in the JPC encoder.
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description Rohit Keshri 2024-01-15 05:55:01 UTC 
A flaw was found due to invalid memory write in jasper due to missing range check in the JPC encoder.

Refer:
https://bugs.gentoo.org/922075
Comment 1 Rohit Keshri 2024-01-15 05:56:48 UTC 
Created jasper tracking bugs for this issue:

Affects: fedora-all [bug 2258402]


Created mingw-jasper tracking bugs for this issue:

Affects: fedora-all [bug 2258403]
Comment 3 Sandipan Roy 2024-01-18 06:53:33 UTC 
https://github.com/jasper-software/jasper/commit/aeef5293c978158255ad4f127089644745602f2a
Note You need to log in before you can comment on or make changes to this bug.