CVE-2025-8835

MEDIUM

A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jas_image_chclrspc of the file src/libjasper/base/jas_image.c of the component Image Color Space Conv...

Affects 1 product across 1 vendor.

CVSS 3.15.5
CVSS v41.9
EPSS0.2%
Percentile12th
PatchPatched
CVSS Vector — Plain English Requires local access, low complexity, low privileges required, no user interaction needed, impact contained to the vulnerable component, no confidentiality impact, no integrity impact, full availability impact.
CWE Weakness Definitions
CWE-404: CWE-404
CWE-476: NULL Pointer Dereference

Software attempts to use a NULL pointer, causing a crash and denial of service.

Related Attack Patterns (CAPEC)
CAPEC-494 TCP Fragmentation
via CWE-404
CAPEC-495 UDP Fragmentation
via CWE-404
CAPEC-496 ICMP Fragmentation
via CWE-404
CAPEC-666 BlueSmacking
via CWE-404
CAPEC-125 Flooding
via CWE-404
Show all 7

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

A medium severity vulnerability affects Jasper Project systems (CVE-2025-8835). No public exploit code is currently available. Review vendor advisories and apply patches during the next maintenance window.

BSID: BS-2025-GLOBAL-047940-M • Model: rule-based-v1 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2025-8835?
A medium severity vulnerability affects Jasper Project systems (CVE-2025-8835). No public exploit code is currently available. Review vendor advisories and apply patches during the next maintenance window.
What is the CVSS score for CVE-2025-8835?
CVE-2025-8835 has CVSS 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. EPSS: 0.2%.
Is CVE-2025-8835 actively exploited?
No confirmed active exploitation of CVE-2025-8835 as of 2026-05-30.
How do I remediate CVE-2025-8835?
Priority: LOW. PSIRT: [email protected]
What systems are affected by CVE-2025-8835?
CVE-2025-8835 affects Jasper Project Jasper.
Vulnerability Details
CVE IDCVE-2025-8835
BSIDBS-2025-GLOBAL-047940-M BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Published2025-08-11
Last Modified2026-04-29
ICS Relevance0%
Weakness (CWE)
CWE-404NULL Pointer Dereference
SourceNVD
Official Description

A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jas_image_chclrspc of the file src/libjasper/base/jas_image.c of the component Image Color Space Conversion Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The identifier of the patch is bb7d62bd0a2a8e0e1fdb4d603f3305f955158c52. It is recommended to apply a patch to fix this issue.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Vulnerability details: A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jas_image_chclrspc of the file src/libjasper/base/jas_image.c of the component Image Color Space Conversion Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The identifier of the patch is bb7d62bd0a2a8e0e1fdb4d603f3305f955158c52. It is recommended to apply a patch to fix thi CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Exploitation Likelihood: MINIMAL

Affected Products
VendorProductAffected Versions
Jasper Project Jasper ≤ 4.2.5
Remediation

No official vendor advisory link on record. See the CVE record →

Vendor PSIRT: [email protected]
Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 431 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Modelrule-based-v1
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hasha84693e7cba9fa3fe59e4a3da84ea4300240f63ccf024b7f71999279704d5f81bd91ed2558abccd06ad3a839782e3891d864939ff78638d69100d54340579af8
Related CVEs affecting Jasper Project
CVE-2008-3522 10.0 Buffer overflow in the jas_stream_printf function in libjasper/base/jas_strea... CVE-2008-3520 9.3 Multiple integer overflows in JasPer 1.900.1 might allow context-dependent at... CVE-2018-19541 8.8 An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900... CVE-2018-19540 8.8 An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900... CVE-2015-8751 8.8 Integer overflow in the jas_matrix_create function in JasPer allows context-d...
View all Jasper Project CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →