CVE-2025-50952

MEDIUM6.5EPSS 0.08%

openjpeg2 - security update

Published: 8/7/2025Modified: 4/28/2026

Description

openjpeg v 2.5.0 was discovered to contain a NULL pointer dereference via the component /openjp2/dwt.c.

Affected packages (3)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1MEDIUM6.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

References (2)