Lucene search
+L

2383 matches found

Positive Technologies
Positive Technologies
•added 2025/08/07 12:00 a.m.•13 views

PT-2025-32265

Name of the Vulnerable Software and Affected Versions openjpeg version 2.5.0 Description openjpeg version 2.5.0 contains a NULL pointer dereference in the /openjp2/dwt.c component. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

6.5CVSS6.5AI score0.00275EPSS
SaveExploits0References52
osv_cve
osv_cve
•added 2025/08/07 12:00 a.m.•8 views

CVE-2025-50952

openjpeg v 2.5.0 was discovered to contain a NULL pointer dereference via the component /openjp2/dwt.c...

6.5CVSS6.6AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/07 12:00 a.m.•6 views

CVE-2025-50952: NULL Pointer Dereference

openjpeg v 2.5.0 was discovered to contain a NULL pointer dereference via the component /openjp2/dwt.c...

6.5CVSS5.5AI score0.00275EPSS
SaveExploits0References1
Snyk
Snyk
•added 2025/08/07 12:00 a.m.•3 views

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the opjdwtdecodetile function. An attacker can cause a crash and disrupt service availability by submitting malicious input that triggers a null pointer dereference. Remediation Upgrade openjpeg to version...

6.9CVSS6.9AI score0.00275EPSS
SaveExploits0References2
CVE
CVE
•added 2025/08/07 12:00 a.m.•102 views

CVE-2025-50952

The openjpeg library (specifically version 2.5.0 ) is vulnerable to a NULL pointer dereference within the /openjp2/dwt.c component. This flaw allows maliciously constructed pictures to trigger the program to enter a large loop and continuously print warning messages to the terminal. This vulnerab...

6.5CVSS7AI score0.00275EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2025/08/07 12:00 a.m.•7 views

CVE-2025-50952

openjpeg v 2.5.0 was discovered to contain a NULL pointer dereference via the component /openjp2/dwt.c...

6.9CVSS0.00275EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2025/08/07 12:00 a.m.•39 views

CVE-2025-50952

openjpeg v 2.5.0 was discovered to contain a NULL pointer dereference via the component /openjp2/dwt.c...

0.00275EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/08/07 12:00 a.m.•3 views

CVE-2025-50952

openjpeg v 2.5.0 was discovered to contain a NULL pointer dereference via the component /openjp2/dwt.c...

6.8AI score0.00275EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/08/07 12:00 a.m.•12 views

OpenJPEG v2.5.0 安全漏洞

OpenJPEG is an open source C-based open source JPEG2000 codec from Université catholique de Louvain. A security vulnerability exists in OpenJPEG version v2.5.0, which stems from a null pointer dereference in the /openjp2/dwt.c component...

6.5CVSS6.4AI score0.00275EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2025/08/07 12:00 a.m.•11 views

CVE-2025-50952

openjpeg v 2.5.0 was discovered to contain a NULL pointer dereference via the component /openjp2/dwt.c...

6.5CVSS6.9AI score0.00275EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2025/08/07 12:00 a.m.•14 views

CVE-2025-50952

openjpeg v 2.5.0 was discovered to contain a NULL pointer dereference via the component /openjp2/dwt.c...

6.5CVSS7.7AI score0.00275EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2025/08/06 11:22 p.m.•13 views

SUSE CVE-2025-54874

OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG from 2.5.1 through 2.5.3, a call to opjjp2readheader may lead to OOB heap memory write when the data stream pstream is too short and pimage is not initialized...

7CVSS7AI score0.00626EPSS
SaveExploits1References4
osv_azl
osv_azl
•added 2025/08/05 3:15 p.m.•16 views

AZL-66114 CVE-2025-54874 affecting package openjpeg2 2.3.1-12

OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG from 2.5.1 through 2.5.3, a call to opjjp2readheader may lead to OOB heap memory write when the data stream pstream is too short and pimage is not initialized...

9.8CVSS7.3AI score0.00626EPSS
SaveExploits1References1
osv_azl
osv_azl
•added 2025/08/05 3:15 p.m.•17 views

AZL-66090 CVE-2025-54874 affecting package openjpeg2 2.3.1-12

OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG from 2.5.1 through 2.5.3, a call to opjjp2readheader may lead to OOB heap memory write when the data stream pstream is too short and pimage is not initialized...

9.8CVSS7.4AI score0.00626EPSS
SaveExploits1References1
NVD
NVD
•added 2025/08/05 3:15 p.m.•16 views

CVE-2025-54874

OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG from 2.5.1 through 2.5.3, a call to opjjp2readheader may lead to OOB heap memory write when the data stream pstream is too short and pimage is not initialized...

9.8CVSS0.00626EPSS
SaveExploits1References3
osv_debian
osv_debian
•added 2025/08/05 3:15 p.m.•19 views

DEBIAN-CVE-2025-54874

OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG from 2.5.1 through 2.5.3, a call to opjjp2readheader may lead to OOB heap memory write when the data stream pstream is too short and pimage is not initialized...

9.8CVSS7.8AI score0.00626EPSS
SaveExploits1References1
osv_alpine
osv_alpine
•added 2025/08/05 3:15 p.m.•11 views

ALPINE-CVE-2025-54874

OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG from 2.5.1 through 2.5.3, a call to opjjp2readheader may lead to OOB heap memory write when the data stream pstream is too short and pimage is not initialized...

9.8CVSS6.9AI score0.00626EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2025/08/05 3:15 p.m.•21 views

UBUNTU-CVE-2025-54874

OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG from 2.5.1 through 2.5.3, a call to opjjp2readheader may lead to OOB heap memory write when the data stream pstream is too short and pimage is not initialized...

9.8CVSS7.3AI score0.00626EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2025/08/05 2:33 p.m.•17 views

CVE-2025-54874 OpenJPEG allows OOB heap memory write in opj_jp2_read_header

OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG from 2.5.1 through 2.5.3, a call to opjjp2readheader may lead to OOB heap memory write when the data stream pstream is too short and pimage is not initialized...

7.5CVSS6.5AI score
SaveExploits0References5
CVE
CVE
•added 2025/08/05 2:33 p.m.•155 views

CVE-2025-54874

OpenJPEG (JPEG 2000 codec) contains a vulnerability CVE-2025-54874: in OpenJPEG 2.5.1–2.5.3, a call to opj_jp2_read_header may cause an out-of-bounds heap write when the data stream is too short and p_image is not initialized. This is referenced across multiple security advisories and vendors (Ub...

9.8CVSS6.1AI score0.00626EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder