https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-8837.htmlhttps://patchthecve.com/cve/CVE-2025-8837.htmlWed, 17 Jun 2026 10:07:45 +0000MEDIUM 5.3: A vulnerability was identified in JasPer up to 4.2.5. This affects the function jpc_dec_dump of the file src/libjasper/jpc/jpc_dec.c of the component JPEG2000 File Handler. The manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public https://patchthecve.com/cve/CVE-2025-8836.htmlhttps://patchthecve.com/cve/CVE-2025-8836.htmlWed, 17 Jun 2026 10:07:45 +0000LOW 3.3: A vulnerability was determined in JasPer up to 4.2.5. Affected by this issue is the function jpc_floorlog2 of the file src/libjasper/jpc/jpc_enc.c of the component JPEG2000 Encoder. The manipulation leads to reachable assertion. The attack needs to be approached locally. The exploit has been discloshttps://patchthecve.com/cve/CVE-2025-8835.htmlhttps://patchthecve.com/cve/CVE-2025-8835.htmlWed, 17 Jun 2026 10:07:44 +0000LOW 3.3: A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jas_image_chclrspc of the file src/libjasper/base/jas_image.c of the component Image Color Space Conversion Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack