CVE-2025-67749CWE-125

CVE-2025-67749

published December 13, 2025

CVSS
5.3
EPSS
0%
Percentile
26.7
In the wild
Unconfirmed
What it is

PCSX2 is a free and open-source PlayStation 2 (PS2) emulator. In versions 2.5.377 and below, an unchecked offset and size used in a memcpy operation inside PCSX2's CDVD SCMD 0x91 and SCMD 0x8F handlers allow a specially crafted disc image or ELF to cause an out-of-bounds read from emulator memory. Because the offset and size is controlled through MG header fields, a specially crafted ELF can read data beyond the bounds of mg_buffer and have it reflected back into emulated memory. This issue is fixed in version 2.5.378.

The record
Technical detail
CVSS
5.3 · NONE
CVSS v4.0
Not supplied
EPSS
0.00344 · 26.7th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2025-12-13T04:15Z
References (3)
EPSS history
Timeline
  • 12 DEC 22:24Z
    PCSX2 has an Out-of-bounds Read due to unchecked offset and size passed to memcpy
    cvelistv5