CVE-2025-8836
Low
Description
A vulnerability was determined in JasPer up to 4.2.5. Affected by this issue is the function jpc_floorlog2 of the file src/libjasper/jpc/jpc_enc.c of the component JPEG2000 Encoder. The manipulation leads to reachable assertion. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The patch is identified as 79185d32d7a444abae441935b20ae4676b3513d4. It is recommended to apply a patch to fix this issue.
SeverityLow
CVSS3.3
Exploit probability—
ProductJasper
PublishedAug 11, 2025
First seenAug 11, 2025
Weakness typeCWE-617CWE-617
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jasper_project jasper | v ≤ 4.2.5 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.