CVE-2025-29366

In mupen64plus v2.6.0 there is an array overflow vulnerability in the write_rdram_regs and write_rdram_regs functions, which enables executing arbitrary…

Critical · published August 22, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
48.3
In the wild
Unconfirmed
What it is

🚨 Critical array overflow alert! In mupen64plus v2.6.0, a tiny flaw in the system lets attackers execute arbitrary commands on your host machine. That's like finding a secret trapdoor in a secure vault! 🔥 Think of it as a restaurant where a rogue chef sneaks in, finds a way to place orders directly in the system, and can cook whatever dish they want without any checks! It's a recipe for disaster! An attacker could exploit this vulnerability to manipulate your system completely, leading to unauthorized access, data theft, or even taking control of the entire machine. The consequences could be absolutely devastating for your security and privacy!

Put simply

Think of it as a restaurant where a rogue chef sneaks in, finds a way to place orders directly in the system, and can cook whatever dish they want without any checks! It's a recipe for disaster! This array overflow vulnerability in the write_rdram_regs functions allows for memory overwrite, enabling an attacker to execute arbitrary code with the privileges of the vulnerable application.

What to do

An attacker could exploit this vulnerability to manipulate your system completely, leading to unauthorized access, data theft, or even taking control of the entire machine. The consequences could be absolutely devastating for your security and privacy! To protect your system, immediately upgrade mupen64plus to the latest version that addresses this vulnerability. Regularly monitor for updates and consider implementing security controls to restrict access to sensitive applications. 🛡️ You've got this! With a few simple updates, you can take charge of your security and keep your systems safe! 💪✨

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00606 · 48.3th percentile
Published
2025-08-22T00:00Z
EPSS history
Timeline
  • 22 AUG 00:00Z
    In mupen64plus v2.6.0 there is an array overflow vulnerability in the write_rdram_regs and write_rdram_regs functions, which enables executing arbitrary…
    cvelistv5