CVE-2025-9951 in FFmpeg

Riassunto

di MITRE • 09/09/2025

A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execution or cause denial of service via the channel definition cdef atom of JPEG2000.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsabile: Google
• Prenotare: 03/09/2025
• Divulgazione: 09/09/2025
• Moderazione: accettato
• Voce: VDB-323211
• CPE: pronto
• CWE: CWE-122 (confermato)
• CVSS: 5.0 (VulDB)
• EPSS: 0.00399
• KEV: no
• Attività: molto basso
• Settore: Telecommunication, Lawfirm, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-9951
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-9951
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-9951/