Vulnerability Description
A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jas_image_chclrspc of the file src/libjasper/base/jas_image.c of the component Image Color Space Conversion Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The identifier of the patch is bb7d62bd0a2a8e0e1fdb4d603f3305f955158c52. It is recommended to apply a patch to fix this issue.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Jasper Project | Jasper | <= 4.2.5 |
Related Weaknesses (CWE)
References
- https://drive.google.com/file/d/1E754R-FsFkNJp9OYtu6Dqjv47uGSVP18/view?usp=shariExploit
- https://github.com/jasper-software/jasper/commit/bb7d62bd0a2a8e0e1fdb4d603f3305fPatch
- https://github.com/jasper-software/jasper/issues/400ExploitIssue TrackingVendor Advisory
- https://github.com/jasper-software/jasper/issues/400#issuecomment-3134702772ExploitIssue TrackingVendor Advisory
- https://vuldb.com/?ctiid.319369Permissions RequiredVDB Entry
- https://vuldb.com/?id.319369Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.622408ExploitThird Party AdvisoryVDB Entry
- https://github.com/jasper-software/jasper/issues/400ExploitIssue TrackingVendor Advisory
FAQ
What is CVE-2025-8835?
CVE-2025-8835 is a vulnerability with a CVSS score of 3.3 (LOW). A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jas_image_chclrspc of the file src/libjasper/base/jas_image.c of the component Image Color Space Convers...
How severe is CVE-2025-8835?
CVE-2025-8835 has been rated LOW with a CVSS base score of 3.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-8835?
Check the references section above for vendor advisories and patch information. Affected products include: Jasper Project Jasper.