{"id":"CVE-2018-19541","revision":"27dbcbd276a44f4dbaeab92d2a1c9264","records":[{"revision":"27dbcbd276a44f4dbaeab92d2a1c9264","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2018-19541","aliases":[],"title":"An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28…","description":"An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16. There is a heap-based buffer over-read of size 8 in the function jas_image_depalettize in libjasper/base/jas_image.c.","state":0,"publishedAt":"2018-11-26T03:00:00+00:00","modifiedAt":"2026-10-15T17:39:41.351+00:00","affected":[{"ecosystem":"Vendor product","name":"n/a","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"n/a\",\n                    \"vendor\": \"n/a\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"n/a\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://lists.debian.org/debian-lts-announce/2019/01/msg00003.html","https://github.com/mdadams/jasper/issues/182","http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00023.html","http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00025.html","https://www.oracle.com/security-alerts/cpuapr2020.html"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2018-19541","license":"CVE Program Terms of Use","key":"cve-program:CVE-2018-19541","identifiers":["CVE-2018-19541"]},"retained":false,"historicalAffected":[]}],"coverage":[]}