CVE:CVE-2022-2963
CNNVD:CNNVD-202210-1004
JasPer是Michael Adams个人开发者的一个基于C的用于处理图像的工具。该软件支持ISO / IEC 15444-1中定义的JPEG-2000格式，主要用于图像的编码和处理。
JasPer存在安全漏洞，该漏洞源于在cmdopts_parse函数中发现包含内存泄漏错误。
solution:Upgrade jasper_project jasper to a higher version than 3.0.6,and avoid the version 3.0.6; Upgrade fedoraproject fedora to a higher version than 36,and avoid the version 36; Upgrade redhat enterprise_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0