CVE-2025-66909

HighCVSS 7.5

Published: 19/12/2025(UTC)Updated: 13/10/2026(UTC)Translated: 13/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.53%

43th percentile - higher than 43% of all known CVEs

Summary

Turms AI-Serving module v0.10.0-SNAPSHOT and earlier contains an image decompression bomb denial of service vulnerability. The ExtendedOpenCVImage class loads images using OpenCV's imread() without validating dimensions or pixel count before decompression, allowing an attacker to upload a specially crafted compressed image (e.g., PNG) that expands to gigabytes of memory when loaded, causing immediate memory exhaustion, OutOfMemoryError, and service crash.

Risk Assessment

An attacker can remotely, without authentication (if the OCR service is publicly accessible), crash the service via multiple requests, completely denying service availability.

Recommendation

Update Turms AI-Serving to a version containing the fix or implement validation of dimensions and pixel count before image decompression.

Other vulnerabilities in Turms AI-Serving

CVE-2025-66908Medium
Turms AI-Serving module v0.10.0-SNAPSHOT and earlier contains an improper file type validation vulnerability in the OCR image upload functionality. The OcrController in turms-ai-serving/src/main/java/im/turms/ai/domain/ocr/controller/OcrController.java uses the @FormData(contentType = MediaTypeConst.IMAGE) annotation to restrict uploads to image files, but this constraint is not properly enforced. The system relies solely on client-provided Content-Type headers and file extensions without validating actual file content using magic bytes (file signatures). An attacker can upload arbitrary file types including executables, scripts, HTML, or web shells by setting the Content-Type header to "image/*" or using an image file extension. This bypass enables potential server-side code execution, stored XSS, or information disclosure depending on how uploaded files are processed and served.

Original NVD description (English source)

Turms AI-Serving module v0.10.0-SNAPSHOT and earlier contains an image decompression bomb denial of service vulnerability. The ExtendedOpenCVImage class in ai/djl/opencv/ExtendedOpenCVImage.java loads images using OpenCV's imread() function without validating dimensions or pixel count before decompression. An attacker can upload a specially crafted compressed image file (e.g., PNG) that is small when compressed but expands to gigabytes of memory when loaded. This causes immediate memory exhaustion, OutOfMemoryError, and service crash. No authentication is required if the OCR service is publicly accessible. Multiple requests can completely deny service availability.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS