CVE-2018-9252: Jasper Project Jasper

Medium severity, CVSS 6.5. EPSS: 2% chance of exploitation in the next 30 days.

JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_abstorelstepsize in libjasper/jpc/jpc_enc.c.

Affected products

• Jasper Project Jasper: version 2.0.14 only

Published 2018-04-04. Last modified 2026-06-17.