Openjpeg

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-50952 MEDIUM PATCH This Month

openjpeg v 2.5.0 was discovered to contain a NULL pointer dereference via the component /openjp2/dwt.c. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Null Pointer Dereference Openjpeg Redhat Suse

NVD GitHub

CVSS 3.1

6.5

EPSS

0.0%

CVE-2025-54874 MEDIUM POC PATCH This Week

OpenJPEG is an open-source JPEG 2000 codec. Rated medium severity (CVSS 6.6), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Openjpeg Redhat Suse

NVD GitHub

CVSS 4.0

6.6

EPSS

0.1%

CVE-2025-50952

EPSS 0% CVSS 6.5

MEDIUM PATCH This Month

Denial Of Service Null Pointer Dereference Openjpeg +2

NVD GitHub

CVE-2025-54874

EPSS 0% CVSS 6.6

MEDIUM POC PATCH This Week

OpenJPEG is an open-source JPEG 2000 codec. Rated medium severity (CVSS 6.6), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Openjpeg Redhat +1

NVD GitHub