How many CVEs does JasPer Project have?

JasPer Project has 102 published CVE records since 2008, including 3 in the last two years.

How many JasPer Project CVEs are in CISA KEV?

None of JasPer Project's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which JasPer Project products have the most CVEs?

The JasPer Project products with the most published CVEs are jasper, JasPer Image Color Space Conversion Handler, JasPer JPEG2000 Encoder, JasPer versions 4.2.0-4.2.5.

What are the most common weakness types in JasPer Project CVEs?

JasPer Project's CVEs most often map to these CWE weakness types: CWE-617 (Reachable Assertion), CWE-476 (NULL Pointer Dereference), CWE-125 (Out-of-bounds Read), CWE-190 (Integer Overflow or Wraparound).

How many critical JasPer Project vulnerabilities are there?

JasPer Project has 2 critical and 42 high-severity CVEs.

What is the average severity of JasPer Project CVEs?

The average CVSS base score across JasPer Project's scored CVEs is 6.6.

RadicalNotion.AI

Log in Create an account

102 CVEs

JasPer Project Vulnerabilities

Name: JasPer Project vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for JasPer Project.

102

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

58

Public exploits

PoC or exploit code

6.6

Avg CVSS

2008–2025

Overview

JasPer Project has 102 published CVE records since 2008, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 58 have a known public exploit. The average CVSS base score across scored CVEs is 6.6.

Security scorecard

A quick read on JasPer Project's vulnerability posture, as a share of its 102 published CVEs.

Average CVSS: 6.6
Critical / high: 43%
Actively exploited (KEV): 0%
Public exploit available: 57%
Patch available: 87%

Severity and exploitation

How the CVSS severity of JasPer Project's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High42

Medium58

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of JasPer Project's CVEs are currently listed in CISA's KEV catalog.

Public exploits

58

58 of JasPer Project's CVEs have a known public exploit available.

Most affected products

The JasPer Project products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in JasPer Project CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish JasPer Project CVE records.

Disclosure activity by year

How many JasPer Project CVEs were published each year.

2017

55

2018

17

2019

1

2020

2

2021

6

2022

2

2024

2

2025

3

Latest JasPer Project CVEs

The most recently disclosed vulnerabilities affecting JasPer Project.

JasPer JPEG2000 File jpc_dec.c jpc_dec_dump use after free
CWE-416
Medium · CVSS 4.8
EPSS 0.2%2025-08-11
JasPer JPEG2000 Encoder jpc_enc.c jpc_floorlog2 assertion
CWE-617
Medium · CVSS 4.8
EPSS 0.2%2025-08-11
JasPer Image Color Space Conversion jas_image.c jas_image_chclrspc null pointer dereference
CWE-476
Medium · CVSS 4.8
EPSS 0.2%2025-08-11
High vulnerability · 2024-04-19
CWE-617
High · CVSS 7.5
EPSS 0.7%2024-04-19
High vulnerability · 2024-01-16
CWE-119
High · CVSS 7.8
EPSS 0.3%2024-01-16
High vulnerability · 2022-10-14
CWE-401
High · CVSS 7.5
EPSS 1.7%2022-10-14
Medium vulnerability · 2022-09-16
CWE-617
Medium · CVSS 5.5
EPSS 0.4%2022-09-16
Medium vulnerability · 2021-07-15
CWE-369
Medium · CVSS 5.5
EPSS 0.7%2021-07-15
Medium vulnerability · 2021-03-25
CWE-476
Medium · CVSS 5.5
EPSS 0.6%2021-03-25
Medium vulnerability · 2021-03-25
CWE-476
Medium · CVSS 5.5
EPSS 0.8%2021-03-25
Medium vulnerability · 2021-02-23
CWE-476
Medium · CVSS 5.5
EPSS 1.1%2021-02-23
High vulnerability · 2021-02-23
CWE-125
High · CVSS 7.1
EPSS 1.2%2021-02-23

Get an alert for each new JasPer Project CVE, with AI-written analysis and remediation steps.

Monitor JasPer Project CVEs

Other vendors

CVE counts for other vendors.

Artica103 CVEs FasterXML103 CVEs osCommerce103 CVEs woocommerce103 CVEs mi102 CVEs Xoops102 CVEs 1Panel-dev101 CVEs isc-projects101 CVEs

Browse all vendors

Frequently asked questions

Common questions about JasPer Project vulnerabilities.

How many CVEs does JasPer Project have?: JasPer Project has 102 published CVE records since 2008, including 3 in the last two years.
How many JasPer Project CVEs are in CISA KEV?: None of JasPer Project's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which JasPer Project products have the most CVEs?: The JasPer Project products with the most published CVEs are jasper, JasPer Image Color Space Conversion Handler, JasPer JPEG2000 Encoder, JasPer versions 4.2.0-4.2.5.
What are the most common weakness types in JasPer Project CVEs?: JasPer Project's CVEs most often map to these CWE weakness types: CWE-617 (Reachable Assertion), CWE-476 (NULL Pointer Dereference), CWE-125 (Out-of-bounds Read), CWE-190 (Integer Overflow or Wraparound).
Are there public exploits for JasPer Project vulnerabilities?: Yes — 58 of JasPer Project's CVEs have a known public exploit.
How many critical JasPer Project vulnerabilities are there?: JasPer Project has 2 critical and 42 high-severity CVEs.
What is the average severity of JasPer Project CVEs?: The average CVSS base score across JasPer Project's scored CVEs is 6.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track JasPer Project vulnerabilities

Get an alert for each new JasPer Project CVE, with AI-written analysis and remediation steps.

Create an account See pricing