CVEvulnerability

CVE-2025-9951

7.2 HIGH Published 2025-09-09 Modified 2026-10-19 Official page ↗
Status
Deferred
Published
2025-09-09
Last modified
2026-10-19
Assigner
[email protected]
CVSS 4.0 ([email protected])
7.2 HIGH — CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weaknesses
CWE-122

Description

A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execution or cause denial of service via the channel definition cdef atom of JPEG2000.

Related

Weakness · CWE (1)

  • CWE-122 Heap-based Buffer Overflow weakness

References