AZL-66090 CVE-2025-54874 affecting package openjpeg2 2.3.1-12

OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG from 2.5.1 through 2.5.3, a call to opjjp2readheader may lead to OOB heap memory write when the data stream pstream is too short and pimage is not initialized...

CVE-2025-54874 OpenJPEG allows OOB heap memory write in opj_jp2_read_header

OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG from 2.5.1 through 2.5.3, a call to opjjp2readheader may lead to OOB heap memory write when the data stream pstream is too short and pimage is not initialized...

CVE-2025-54874

OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG from 2.5.1 through 2.5.3, a call to opjjp2readheader may lead to OOB heap memory write when the data stream pstream is too short and pimage is not initialized...

CVE-2025-54874: Use of Uninitialized Variable

OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG from 2.5.1 through 2.5.3, a call to opjjp2readheader may lead to OOB heap memory write when the data stream pstream is too short and pimage is not initialized...

Use of Uninitialized Variable

Overview Affected versions of this package are vulnerable to Use of Uninitialized Variable via the opjjp2readheader component when reading crafted JPEG images. An attacker can achieve arbitrary heap buffer writes by supplying specially crafted JPEG files. PoC include include static void decodecon...

opencv:core_fuzzer: Heap-buffer-overflow in opj_jp2_read_header

Detailed Report: https://oss-fuzz.com/testcase?key=5087667039043584 Project: opencv Fuzzing Engine: honggfuzz Fuzz Target: corefuzzer Job Type: honggfuzzasanopencv Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x50400087a124 Crash State: opjjp2readheader...

opencv:imdecode_fuzzer: Crash in opj_jp2_read_header

Project: https://github.com/opencv/opencv.git Detailed Report: https://oss-fuzz.com/testcase?key=5151425289060352 Project: opencv Fuzzing Engine: libFuzzer Fuzz Target: imdecodefuzzer Job Type: libfuzzerubsanopencv Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x0000007c6aab Crash...

imagemagick:encoder_j2c_fuzzer: Segv on unknown address in opj_jp2_read_header

Detailed Report: https://oss-fuzz.com/testcase?key=4517827836772352 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderj2cfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: opjjp2readheader ReadJP2Image...

imagemagick:encoder_j2c_fuzzer: Segv on unknown address in opj_jp2_read_header

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4517862656835584 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderj2cfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Segv on unknown address Crash...