CVE-2018-19543
An issue was discovered in JasPer 2.0.14.
Published Nov 26, 2018 · updated Oct 15, 2026 · jasper project jasper
An issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the function jp2_decode in libjasper/jp2/jp2_dec.c.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Nov 26, 2018 · NIST NVD
Detected
An issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the function jp2_decode in libjasper/jp2/jp2_dec.c.
Jun 17, 2026 · NIST NVD
Updated
An issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the function jp2_decode in libjasper/jp2/jp2_dec.c.
Oct 15, 2026 · NIST NVD
Updated
An issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the function jp2_decode in libjasper/jp2/jp2_dec.c.
Affected
- cpe canonical/ubuntu linux14.04
- cpe canonical/ubuntu linux16.04
- cpe debian/debian linux8.0
- cpe jasper project/jasper2.0.14
- cpe suse/linux enterprise desktop12
- cpe suse/linux enterprise server11
Sources
- CVE.orgVulnerability recordCVE-2018-19543
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2018-19543
An issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the function jp2_decode in libjasper/jp2/jp2_dec.c.
nvd.nist.gov