Dolby UDC up to 4.13 DD+ Decoder evo_priv.c out-of-bounds write

Summaryinfo

A vulnerability described as critical has been identified in Dolby UDC up to 4.13. This vulnerability affects unknown code of the file evo_priv.c of the component DD+ Decoder. Executing a manipulation can lead to out-of-bounds write. This vulnerability appears as CVE-2025-54957. The attack may be performed from remote. There is no available exploit.

Detailsinfo

A vulnerability classified as critical was found in Dolby UDC up to 4.13. This vulnerability affects an unknown code block of the file evo_priv.c of the component DD+ Decoder. The manipulation with an unknown input leads to a out-of-bounds write vulnerability. The CWE definition for the vulnerability is CWE-787. The product writes data past the end, or before the beginning, of the intended buffer. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

An issue was discovered in Dolby UDC 4.5 through 4.13. A crash of the DD+ decoder process can occur when a malformed DD+ bitstream is processed. When Evolution data is processed by evo_priv.c from the DD+ bitstream, the decoder writes that data into a buffer. The length calculation for a write can overflow due to an integer wraparound. This can lead to the allocated buffer being too small, and the out-of-bounds check of the subsequent write to be ineffective, leading to an out-of-bounds write.

The advisory is shared for download at professional.dolby.com. This vulnerability was named CVE-2025-54957 since 08/03/2025. The exploitation appears to be easy. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. Successful exploitation requires user interaction by the victim. There are known technical details, but no exploit is available. The current price for an exploit might be approx. USD $0-$5k (estimation calculated on 10/28/2025).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at CERT Bund (WID-SEC-2025-2307). Once again VulDB remains the best source for vulnerability data.

Affected

• Microsoft Windows 11
• Microsoft Windows Server
• Microsoft Windows Server 2016
• Microsoft Windows 10
• Microsoft Windows Server 2019
• Microsoft Windows
• Microsoft Windows Server 2022
• Microsoft Windows Server 2012
• Microsoft Windows Server 2012 R2
• Microsoft Windows Server 2025

Productinfo

Vendor

• Dolby

Name

• UDC

Version

• 4.0
• 4.1
• 4.2
• 4.3
• 4.4
• 4.5
• 4.6
• 4.7
• 4.8
• 4.9
• 4.10
• 4.11
• 4.12
• 4.13

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion