CVE-2025-9951CWE-122
CVE-2025-9951
published September 9, 2025
What it is
A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execution or cause denial of service via the channel definition cdef atom of JPEG2000.
The record
Technical detail
- CVSS
- 7.2 · NONE
- CVSS v4.0
- Not supplied
- EPSS
- 0.00443 · 37.5th percentile
- Weakness
- CWE-122 · Heap-based Buffer Overflow
- Published
- 2025-09-09T18:15Z
References (1)
EPSS history
Timeline