CVE-2008-3520: Jasper Project Jasper

High severity, CVSS 9.3. EPSS: 3.2% chance of exploitation in the next 30 days.

Multiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via a crafted image file, related to integer multiplication for memory allocation.

Affected products

Published 2008-10-02. Last modified 2026-06-16.