PT-2025-32265

CVE-2025-50952

·

Published

2025-08-07

·

Updated

2026-08-23

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions openjpeg version 2.5.0
Description openjpeg version 2.5.0 contains a NULL pointer dereference in the /openjp2/dwt.c component.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Related identifiers
CLSA-2026-1786708350
CLSA-2026-1787149537
DLA-4424-1
ECHO-726A-4071-0F2F
OESA-2025-2038
OESA-2025-2039
OESA-2025-2040
OESA-2025-2041
OESA-2025-2042
OESA-2025-2075
OPENSUSE-SU-2025:15430-1
USN-7757-1
Found an issue in the description? Have something to add? Feel free to write us 👾