Most recent entries from all

ALSA-2025:13944 — Important: openjpeg2 security update

Affected: AlmaLinux:10: openjpeg2, AlmaLinux:10: openjpeg2-devel, AlmaLinux:10: openjpeg2-tools

OpenJPEG is an open source library for reading and writing image files in JPEG2000 format.

Security Fix(es):

* openjpeg: OpenJPEG OOB heap memory write (CVE-2025-54874)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2025-13203

BELL-CVE-2025-54874

Affected: Alpaquita:25: openjpeg, Alpaquita:stream: openjpeg

certfr-2025-avi-0969 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer…

certfr-2025-avi-0969

EUVD-2026-272526

fkie_cve-2025-54874

OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG from 2.5.1 through 2.5.3, a call to opj_jp2_read_header may lead to OOB heap memory write when the data stream p_stream is too short and p_image is not initialized.

NCSC-2026-0021 — Kwetsbaarheden verholpen in Oracle Database Server producten

NCSC-2026-0021

openSUSE-SU-2025:15421-1 — chromedriver-139.0.7258.66-1.1 on GA media

chromedriver-139.0.7258.66-1.1 on GA media

RHSA-2025:13944 — Red Hat Security Advisory: openjpeg2 security update

openjpeg: OpenJPEG OOB heap memory write

SUSE-SU-2026:21995-1 — Security update for openjpeg2

Security update for openjpeg2

UBUNTU-CVE-2025-54874

Affected: Ubuntu:16.04:LTS: blender, Ubuntu:16.04:LTS: insighttoolkit4, Ubuntu:16.04:LTS: texmaker, Ubuntu:18.04:LTS: blender, Ubuntu:18.04:LTS: insighttoolkit4, Ubuntu:Pro:18.04:LTS: qtwebengine-opensource-src, Ubuntu:Pro:18.04:LTS: texmaker, Ubuntu:20.04:LTS: blender, Ubuntu:20.04:LTS: insighttoolkit4, Ubuntu:Pro:20.04:LTS: qtwebengine-opensource-src and 16 more

WID-SEC-W-2025-1722 — OpenJPEG: Schwachstelle ermöglicht Codeausführung

Ein lokaler Angreifer kann eine Schwachstelle in OpenJPEG ausnutzen, um Code auszuführen.