PT-2025-32265 · Openjpeg+4 · Openjpeg+4

Xiaoxiaoafeifei · Published 2025-08-07 · Updated 2026-03-29 · CVE-2025-50952

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions openjpeg version 2.5.0

Description openjpeg version 2.5.0 contains a NULL pointer dereference in the /openjp2/dwt.c component.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2025-10831

CVE-2025-50952

DLA-4424-1

ECHO-726A-4071-0F2F

OESA-2025-2038

OESA-2025-2039

OESA-2025-2040

OESA-2025-2041

OESA-2025-2042

OESA-2025-2075

OPENSUSE-SU-2025:15430-1

USN-7757-1

Affected Products

Debian

Linuxmint

Red Os

Ubuntu

Openjpeg

References · 50

• https://osv.dev/vulnerability/DLA-4424-1 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2025-50952 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-10831 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-50952 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-50952 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-2038 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-2039 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2025-50952 · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15430-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-2075 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7757-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2026-0224SE18 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-2042 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2026-0421SE17 · Vendor Advisory