CVE-2025-22921

What it actually does

Segmentation violation triggered by invalid memory access during JPEG2000 decoding in the jpeg2000dec.c component, resulting in a crash.

Why it matters to the business

Applications that process untrusted media files can be forced to crash, causing denial of service; the issue affects tools relying on the affected decoder with limited downstream dependents noted.

How an attack unfolds

An attacker crafts a malformed JPEG2000 image file and supplies it to an application using the vulnerable decoder; processing the file triggers the segmentation violation without requiring authentication or special privileges.

How to fix it

Upgrade radare2 to the fixed commit 2ec8d3c9f2103c7da8bcb7d864db000b9e93a05a or later; rebuild any dependent packages against the patched version.

How to confirm the fix worked

Confirm the installed radare2 version includes commit 2ec8d3c9f2103c7da8bcb7d864db000b9e93a05a; test with known triggering JPEG2000 samples to verify absence of crash.

Typical attack path

1. Obtain or generate a malicious JPEG2000 file that triggers the flaw
2. Deliver the file to a target application or system using the decoder
3. Trigger file processing to induce the segmentation violation and crash

How to detect it

Review application and system logs for segmentation fault entries during media file processing; inspect crash dumps or core files for references to jpeg2000dec.c.

What your security team should do

• Prioritize patching radare2 installations that process untrusted media within the next maintenance window
• Monitor EPSS and exploit maturity indicators for any future increase in risk
• Restrict processing of external image files in analysis environments until updated