Msrc Cbl2 Jasper 2.0.32-4 On Cbl Mariner 2.0 vulnerabilities

CVE-2025-8837 [MEDIUM] CWE-416 JasPer JPEG2000 File jpc_dec.c jpc_dec_dump use after free JasPer JPEG2000 File jpc_dec.c jpc_dec_dump use after free FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with

CVE-2025-8836 [MEDIUM] CWE-617 JasPer JPEG2000 Encoder jpc_enc.c jpc_floorlog2 assertion JasPer JPEG2000 Encoder jpc_enc.c jpc_floorlog2 assertion FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with wh

CVE-2024-31744 [HIGH] CWE-617 In Jasper 4.2.2 the jpc_streamlist_remove function in src/libjasper/jpc/jpc_dec.c:2407 has an assertion failure vulnerability allowing attackers to cause a denial of service attack through a specific In Jasper 4.2.2 the jpc_streamlist_remove function in src/libjasper/jpc/jpc_dec.c:2407 has an assertion failure vulnerability allowing attackers to cause a denial of service attack through a specific image file. FAQ: Is Azure Linux the only Microsoft product that incl

CVE-2023-51257 [HIGH] CWE-119 An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code. An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code. FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure