PT-2023-8463 · Jasper+2 · Jasper+2

Pip-Izonyo · Publicado 2023-12-15 · Atualizado 2025-11-05 · CVE-2023-51257

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Jasper-Software Jasper versions 4.1.1 and earlier

Description The issue is related to an invalid memory write that allows a local attacker to execute arbitrary code. It involves a buffer overflow in memory when handling an ICC profile, specifically related to the jas image decode() function of the JasPer library. This can be exploited to execute arbitrary code.

Recommendations For Jasper-Software Jasper versions 4.1.1 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Enumeração de Fraquezas

CWE-131

CWE-119

Identificadores relacionados

ALT-PU-2024-2550

AZL-33325

AZL-34807

BDU:2024-00902

CVE-2023-51257

OPENSUSE-SU-2024:13576-1

OPENSUSE-SU-2024_0241-1

ROSA-SA-2025-2649

SUSE-SU-2024:0240-1

SUSE-SU-2024:0241-1

SUSE-SU-2024_0240-1

SUSE-SU-2024_0241-1

SUSE-SU-2025:3947-1

SUSE-SU-2025_3947-1

Produtos afetados

Alt Linux

Jasper

Suse

Referências · 34

• https://github.com/jasper-software/jasper/issues/367 · Nota
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/HNTGL7I5IJSQ4BZ5MGKWJPQYICUMHQ5I · Aviso do Fabricante
• https://bugzilla.suse.com/1247904 · Nota
• https://suse.com/security/cve/CVE-2025-8836 · Nota
• https://bugzilla.suse.com/1218802 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-51257 · Nota de Segurança
• https://osv.dev/vulnerability/AZL-34807 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2024/suse-su-20240241-1 · Nota
• https://suse.com/security/cve/CVE-2025-8835 · Nota
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MBF5KYWCZVIDMITRX7GBVWGNWKAMQORZ · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2023-51257 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2024:0240-1 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2023-51257 · Nota de Segurança
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/MBF5KYWCZVIDMITRX7GBVWGNWKAMQORZ · Aviso do Fabricante
• https://bugzilla.suse.com/1247901 · Nota