Summary
[2.5.2-4.1]
- fix OpenJPEG OOB heap memory write (CVE-2025-54874)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | openjpeg2 | 0:2.5.2-4.el10_0.1 |
| Oracle Linux · 10 | openjpeg2-devel | 0:2.5.2-4.el10_0.1 |
| Oracle Linux · 10 | openjpeg2-tools | 0:2.5.2-4.el10_0.1 |
Vulnerabilities 1
-
Medium 6.6CVE-2025-54874 Public exploit
OpenJPEG allows OOB heap memory write in opj_jp2_read_header
OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG from 2.5.1 through 2.5.3, a call to opj_jp2_read_header may lead to OOB heap memory write when the data stream p_stream is too short and p_image is not initialized.