Lucene search
+L

2401 matches found

Snyk
Snyk
•added 2025/08/07 12:00 a.m.•3 views

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the opjdwtdecodetile function. An attacker can cause a crash and disrupt service availability by submitting malicious input that triggers a null pointer dereference. Remediation Upgrade openjpeg to version...

6.9CVSS6.4AI score0.00291EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/07 12:00 a.m.•6 views

CVE-2025-50952: NULL Pointer Dereference

openjpeg v 2.5.0 was discovered to contain a NULL pointer dereference via the component /openjp2/dwt.c...

6.5CVSS6.5AI score0.00291EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/08/07 12:00 a.m.•14 views

PT-2025-32265

Name of the Vulnerable Software and Affected Versions openjpeg version 2.5.0 Description openjpeg version 2.5.0 contains a NULL pointer dereference in the /openjp2/dwt.c component. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

6.5CVSS6.6AI score0.00291EPSS
SaveExploits0References52
Cvelist
Cvelist
•added 2025/08/07 12:00 a.m.•39 views

CVE-2025-50952

openjpeg v 2.5.0 was discovered to contain a NULL pointer dereference via the component /openjp2/dwt.c...

0.00291EPSS
SaveExploits0References1
CVE
CVE
•added 2025/08/07 12:00 a.m.•104 views

CVE-2025-50952

The openjpeg library (specifically version 2.5.0 ) is vulnerable to a NULL pointer dereference within the /openjp2/dwt.c component. This flaw allows maliciously constructed pictures to trigger the program to enter a large loop and continuously print warning messages to the terminal. This vulnerab...

6.5CVSS6.4AI score0.00291EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/08/07 12:00 a.m.•3 views

CVE-2025-50952

openjpeg v 2.5.0 was discovered to contain a NULL pointer dereference via the component /openjp2/dwt.c...

6.4AI score0.00291EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/08/07 12:00 a.m.•12 views

OpenJPEG v2.5.0 has security vulnerabilities

OpenJPEG is an open source C-based open source JPEG2000 codec from Université catholique de Louvain. A security vulnerability exists in OpenJPEG version v2.5.0, which stems from a null pointer dereference in the /openjp2/dwt.c component...

6.5CVSS6.5AI score0.00291EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2025/08/07 12:00 a.m.•12 views

CVE-2025-50952

openjpeg v 2.5.0 was discovered to contain a NULL pointer dereference via the component /openjp2/dwt.c...

6.5CVSS6.4AI score0.00291EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2025/08/07 12:00 a.m.•15 views

CVE-2025-50952

openjpeg v 2.5.0 was discovered to contain a NULL pointer dereference via the component /openjp2/dwt.c...

6.5CVSS6.4AI score0.00291EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2025/08/06 11:22 p.m.•13 views

SUSE CVE-2025-54874

OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG from 2.5.1 through 2.5.3, a call to opjjp2readheader may lead to OOB heap memory write when the data stream pstream is too short and pimage is not initialized...

7CVSS7.4AI score0.00629EPSS
SaveExploits1References4
osv_azl
osv_azl
•added 2025/08/05 3:15 p.m.•21 views

AZL-66114 CVE-2025-54874 affecting package openjpeg2 2.3.1-12

OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG from 2.5.1 through 2.5.3, a call to opjjp2readheader may lead to OOB heap memory write when the data stream pstream is too short and pimage is not initialized...

9.8CVSS7.4AI score0.00629EPSS
SaveExploits1References1
osv_azl
osv_azl
•added 2025/08/05 3:15 p.m.•22 views

AZL-66090 CVE-2025-54874 affecting package openjpeg2 2.3.1-12

OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG from 2.5.1 through 2.5.3, a call to opjjp2readheader may lead to OOB heap memory write when the data stream pstream is too short and pimage is not initialized...

9.8CVSS7.4AI score0.00629EPSS
SaveExploits1References1
osv_debian
osv_debian
•added 2025/08/05 3:15 p.m.•21 views

DEBIAN-CVE-2025-54874

OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG from 2.5.1 through 2.5.3, a call to opjjp2readheader may lead to OOB heap memory write when the data stream pstream is too short and pimage is not initialized...

9.8CVSS7.4AI score0.00629EPSS
SaveExploits1References1
osv_alpine
osv_alpine
•added 2025/08/05 3:15 p.m.•14 views

ALPINE-CVE-2025-54874

OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG from 2.5.1 through 2.5.3, a call to opjjp2readheader may lead to OOB heap memory write when the data stream pstream is too short and pimage is not initialized...

9.8CVSS7.4AI score0.00629EPSS
SaveExploits1References1
NVD
NVD
•added 2025/08/05 3:15 p.m.•17 views

CVE-2025-54874

OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG from 2.5.1 through 2.5.3, a call to opjjp2readheader may lead to OOB heap memory write when the data stream pstream is too short and pimage is not initialized...

9.8CVSS0.00629EPSS
SaveExploits1References3
osv_ubuntu
osv_ubuntu
•added 2025/08/05 3:15 p.m.•23 views

UBUNTU-CVE-2025-54874

OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG from 2.5.1 through 2.5.3, a call to opjjp2readheader may lead to OOB heap memory write when the data stream pstream is too short and pimage is not initialized...

9.8CVSS7.4AI score0.00629EPSS
SaveExploits1References4
Mend
Mend
•added 2025/08/05 2:33 p.m.•10 views

CVE-2025-54874

OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG from 2.5.1 through 2.5.3, a call to opjjp2readheader may lead to OOB heap memory write when the data stream pstream is too short and pimage is not initialized...

9.8CVSS7.4AI score0.00629EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2025/08/05 2:33 p.m.•35 views

CVE-2025-54874 OpenJPEG allows OOB heap memory write in opj_jp2_read_header

OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG from 2.5.1 through 2.5.3, a call to opjjp2readheader may lead to OOB heap memory write when the data stream pstream is too short and pimage is not initialized...

7.5CVSS0.00629EPSS
SaveExploits1References3
CVE
CVE
•added 2025/08/05 2:33 p.m.•159 views

CVE-2025-54874

OpenJPEG (JPEG 2000 codec) contains a vulnerability CVE-2025-54874: in OpenJPEG 2.5.1–2.5.3, a call to opj_jp2_read_header may cause an out-of-bounds heap write when the data stream is too short and p_image is not initialized. This is referenced across multiple security advisories and vendors (Ub...

9.8CVSS7.4AI score0.00629EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2025/08/05 2:33 p.m.•13 views

CVE-2025-54874 OpenJPEG allows OOB heap memory write in opj_jp2_read_header

OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG from 2.5.1 through 2.5.3, a call to opjjp2readheader may lead to OOB heap memory write when the data stream pstream is too short and pimage is not initialized...

7.5CVSS7.4AI score0.00629EPSS
SaveExploits1References3
Rows per page
Query Builder