CVE-2025-248555

No scoreFix available

CVE-2025-248555 is a vulnerability with no CVSS score yet in openjdk17-lite, published September 30, 2025. No source lists public exploit code. Fixed in openjdk17-lite 17.0.16_p12-r0.

What does this mean?

Severity: UnratedNo CVSS score yet
Exploit chance: UnscoredNo EPSS score yet
Exploitation: None knownNot on CISA’s or ENISA’s lists
Fixed in: 17.0.16_p12-r0openjdk17-lite +5 more

Affected packages

Affected packages
Package	Affected	Fixed
`openjdk17-lite` Alpaquita:23	17.0.7_p7-r1 up to 17.0.16_p12-r0	17.0.16_p12-r0
`openjdk17-lite` Alpaquita:25	17.0.15_p10-r0 up to 17.0.16_p12-r0	17.0.16_p12-r0
`openjdk17-lite` Alpaquita:stream	17.0.7_p7-r1 up to 17.0.16_p12-r0	17.0.16_p12-r0
`openjdk17-lite` BellSoft Hardened Containers:23	17.0.7_p7-r1 up to 17.0.16_p12-r0	17.0.16_p12-r0
`openjdk17-lite` BellSoft Hardened Containers:25	17.0.15_p10-r0 up to 17.0.16_p12-r0	17.0.16_p12-r0
`openjdk17-lite` BellSoft Hardened Containers:stream	17.0.7_p7-r1 up to 17.0.16_p12-r0	17.0.16_p12-r0

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

docs.bell-sw.com/security/cves/CVE-2025-248555