Vulnerability Details CVE-2025-54874
OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG 2.5.3 and earlier, a call to opj_jp2_read_header may lead to OOB heap memory write when the data stream p_stream is too short and p_image is not initialized.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 3.2%
CVSS Severity
CVSS v3 Score 9.8
References
Products affected by CVE-2025-54874
-
cpe:2.3:a:uclouvain:openjpeg:-
-
cpe:2.3:a:uclouvain:openjpeg:1.0
-
cpe:2.3:a:uclouvain:openjpeg:1.1
-
cpe:2.3:a:uclouvain:openjpeg:1.2
-
cpe:2.3:a:uclouvain:openjpeg:1.3
-
cpe:2.3:a:uclouvain:openjpeg:1.4
-
cpe:2.3:a:uclouvain:openjpeg:1.5
-
cpe:2.3:a:uclouvain:openjpeg:1.5.1
-
cpe:2.3:a:uclouvain:openjpeg:1.5.2
-
cpe:2.3:a:uclouvain:openjpeg:2.0
-
cpe:2.3:a:uclouvain:openjpeg:2.0.0
-
cpe:2.3:a:uclouvain:openjpeg:2.0.1
-
cpe:2.3:a:uclouvain:openjpeg:2.1
-
cpe:2.3:a:uclouvain:openjpeg:2.1.0
-
cpe:2.3:a:uclouvain:openjpeg:2.1.1
-
cpe:2.3:a:uclouvain:openjpeg:2.1.2
-
cpe:2.3:a:uclouvain:openjpeg:2.2.0
-
cpe:2.3:a:uclouvain:openjpeg:2.3.0
-
cpe:2.3:a:uclouvain:openjpeg:2.3.1
-
cpe:2.3:a:uclouvain:openjpeg:2.4.0