Critical · published December 17, 2025
🔥 A simple tweak to width and height parameters in MLT project files can unleash a devastating buffer overflow in Meltytech Shotcut 25.10.31! Think of it as overstuffing a suitcase — if you keep cramming in clothes without regard for space, the zipper just can't contain it all and bursts open! This buffer overflow behaves the same way, leading to serious memory access violations. An attacker could exploit this flaw to crash the application or even execute arbitrary code, putting your projects and data in jeopardy. Imagine losing access to important edits and potentially compromising your entire system!
Think of it as overstuffing a suitcase — if you keep cramming in clothes without regard for space, the zipper just can't contain it all and bursts open! This buffer overflow behaves the same way, leading to serious memory access violations. This vulnerability occurs when the application struggles to allocate memory properly while processing manipulated project files, specifically due to extreme width and height values causing a buffer overflow in the mlt_image_fill_white function.
An attacker could exploit this flaw to crash the application or even execute arbitrary code, putting your projects and data in jeopardy. Imagine losing access to important edits and potentially compromising your entire system! Immediate action is crucial: update Shotcut to version 25.10.32 or later to patch this vulnerability. Additionally, review any project files to ensure they don't contain unusual parameters and educate users on proper file handling. You've got this! By following these steps, you'll keep your projects safe and secure. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| meltytech/shotcut | all versions | — |