CVE-2015-8751: Integer overflow in the jas_matrix_create function in JasPer allows context-dependent attackers to have uns...

Security readout for executives and security teams

CVE-2015-8751 is an integer overflow in JasPer when handling crafted JPEG 2000 images. The business risk depends on whether your systems process untrusted JPEG 2000 files through JasPer. The public bundle does not provide CVSS, affected versions, confirmed exploitation, or a specific fix. Exposure is most likely where JasPer is installed or bundled and receives untrusted JPEG 2000 content, including upload, conversion, scanning, or thumbnail workflows. The bundle lists affected product data as n/a, so inventory confirmation is required. Prioritize inventory and vendor guidance rather than emergency action. Escalate if JasPer processes external JPEG 2000 uploads or file feeds in business-critical systems. Mitigation focus: Inventory systems and dependencies for JasPer usage.; Check vendor or distribution advisories for fixed JasPer packages.; Restrict untrusted JPEG 2000 processing until remediation is confirmed..

Prepared

Jun 6, 2026, 02:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.