Product · uclouvain

openjpeg

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.6

CVE-2025-54874 Public exploit

OpenJPEG allows OOB heap memory write in opj_jp2_read_header

OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG from 2.5.1 through 2.5.3, a call to opj_jp2_read_header may lead to OOB heap memory write when the data stream p_stream is too short and p_image is not initialized.

uclouvain openjpeg qt6-qtwebengine insighttoolkit4 Debian Ubuntu Azure Linux Alpine Wolfi

Aug 5, 2025