Wind River Support Network

HomeDefectsLIN1023-4727

Not to be fixed

LIN1023-4727 : Security Advisory - jasper - CVE-2024-31744

Created: Apr 10, 2024 Updated: Apr 12, 2024

Resolved Date: Apr 10, 2024

Found In Version: 10.23.30.1

Severity: Standard

Applicable for: Wind River Linux LTS 23

Component/s: Userspace

Description

jasper: The "jpc_streamlist_remove" function in "src/libjasper/jpc/jpc_dec.c:2407" in Jasper 4.2.2 has an assertion failure vulnerability.

https://github.com/jasper-software/jasper/issues/381

CREATE(Triage):(User=admin) CVE-2024-31744 (https://nvd.nist.gov/vuln/detail/CVE-2024-31744)