{"id":"JLSEC-2026-551","details":"openjpeg v 2.5.0 was discovered to contain a NULL pointer dereference via the component `/openjp2/dwt.c`.","modified":"2026-07-25T18:25:13.829804846Z","published":"2026-05-26T19:31:24.313Z","upstream":["CVE-2025-50952"],"database_specific":{"license":"CC-BY-4.0","sources":[{"html_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-50952","database_specific":{"status":"Modified"},"id":"CVE-2025-50952","imported":"2026-07-17T22:07:18.654Z","modified":"2026-06-17T09:35:27.740Z","published":"2025-08-07T15:15:32.773Z","url":"https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2025-50952"}]},"references":[{"type":"WEB","url":"https://github.com/uclouvain/openjpeg/issues/1505"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2025/12/msg00035.html"}],"affected":[{"package":{"name":"OpenJpeg_jll","ecosystem":"Julia","purl":"pkg:julia/OpenJpeg_jll?uuid=643b3616-a352-519d-856d-80112ee9badc"},"ranges":[{"type":"SEMVER","events":[{"introduced":"2.5.0+0"},{"fixed":"2.5.2+0"}]}],"database_specific":{"source":"https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2026/JLSEC-2026-551.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"}]}