CVE-2021-26926: Fedoraproject Fedora

High severity, CVSS 7.1. EPSS: 1.2% chance of exploitation in the next 30 days.

A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2_decode function whic may lead to disclosure of information or program crash.

Affected products

• Fedoraproject Fedora: version 32 only; version 33 only; version 34 only
• Jasper Project Jasper: before 2.0.25 (fixed in 2.0.25)

Published 2021-02-23. Last modified 2026-06-17.