description: There's a flaw in jasper's jpc encoder in versions prior to 2.0.23. Crafted input provided to jasper by an attacker could cause an arbitrary out-of-bounds write. This could potentially affect data confidentiality, integrity, or application availability.
problem types: CWE-20->CWE-122->CWE-787
affected:
{
product: jasper
vendor: n/a
versions:
status: affected, version: prior to 2.0.23
}