AZL-66090

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-66090.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-66090

Upstream

CVE-2025-54874

Published

2025-08-05T15:15:32Z

Modified

2026-04-21T04:37:46.739547Z

Summary

CVE-2025-54874 affecting package openjpeg2 2.3.1-12

Details

OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG from 2.5.1 through 2.5.3, a call to opjjp2readheader may lead to OOB heap memory write when the data stream pstream is too short and p_image is not initialized.

References

https://nvd.nist.gov/vuln/detail/CVE-2025-54874

Affected packages

Azure Linux:3 / openjpeg2

Package

Name: openjpeg2
Purl: pkg:rpm/azure-linux/openjpeg2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Last affected

2.3.1-12

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-66090.json"