All 13 CVE vulnerabilities found in jasper, with AI-generated Chinese analysis, references, and POCs.
This page provides a comprehensive aggregation of known security weaknesses associated with the Jasper reporting server product. It serves as a centralized resource for analyzing the specific vulnerabilities that have been identified in this software, covering various severity levels and exploitation vectors. The content compiled here encompasses a wide spectrum of issues, including SQL injection, cross-site scripting, and unauthorized access flaws that affect the integrity and confidentiality of data processed by the application. The data presented spans a broad historical period, capturing both recent patches and legacy issues that may still impact outdated installations. By reviewing this collection, users can effectively track vendor advisories and security notices related to Jasper, allowing them to stay informed about critical updates and mitigation strategies. Furthermore, the page offers a deeper understanding of common weakness classes prevalent in reporting tools, helping developers and administrators recognize patterns in code vulnerabilities. Readers can also look up the detailed vulnerability history of the product, examining how specific issues were addressed over time and assessing the overall security posture of the software. This systematic overview supports informed decision-making for security audits, compliance checks, and remediation efforts, ensuring that stakeholders have access to accurate and consolidated threat intelligence regarding Jasper without navigating multiple disparate sources or relying on incomplete information.
Vendor: The Jasper Project
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-8837 | JasPer JPEG2000 File jpc_dec.c jpc_dec_dump use after free CWE-416 | 5.3 | Medium | 2025-08-11 |
| CVE-2025-8836 | JasPer JPEG2000 Encoder jpc_enc.c jpc_floorlog2 assertion CWE-617 | 3.3 | Low | 2025-08-11 |
| CVE-2025-8835 | JasPer Image Color Space Conversion jas_image.c jas_image_chclrspc null pointer dereference CWE-476 | 3.3 | Low | 2025-08-11 |
| CVE-2022-2963 | JasPer 安全漏洞 | 6.2 | - | 2022-10-14 |
| CVE-2021-3467 | JasPer 代码问题漏洞 CWE-476 | 5.5 | - | 2021-03-25 |
| CVE-2021-3443 | JasPer 代码问题漏洞 CWE-476 | 5.5 | - | 2021-03-25 |
| CVE-2021-26927 | JasPer 代码问题漏洞 CWE-476 | 5.5 | - | 2021-02-23 |
| CVE-2021-26926 | JasPer 缓冲区错误漏洞 CWE-125 | 7.1 | - | 2021-02-23 |
| CVE-2020-27828 | JasPer jpc encoder 输入验证错误漏洞 CWE-20 | 7.8 | - | 2020-12-11 |
| CVE-2016-9583 | JasPer 缓冲区错误漏洞 CWE-190 | 7.8 | - | 2018-08-01 |
| CVE-2016-8654 | JasPer JPC codec 缓冲区错误漏洞 CWE-122 | 7.8 | - | 2018-08-01 |
| CVE-2016-9600 | JasPer 安全漏洞 CWE-476 | 6.5 | - | 2018-03-12 |
| CVE-2016-9591 | JasPer 安全漏洞 CWE-416 | 5.5 | - | 2018-03-09 |
All 13 known CVE vulnerabilities affecting jasper with full Chinese analysis, references, and POCs where available.