CVE-2025-9951

Remote code execution via Heap Buffer Overflow in FFmpeg JPEG2000 PUBLISHED

Description (CNA)

A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execution or cause denial of service via the channel definition cdef atom of JPEG2000.

Affected (CNA)

Vendor / product	Versions
FFmpeg / FFmpeg	affected < 8.0

CWE

CWE-122

References

https://github.com/google/security-research/security/advisories/GHSA-39q3-f8jq-v6mg

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.