VDB
CVE-2025-65834
CVE-2025-65834
PUBLISHED
CVSS 9.800000190734863 CRITICAL
Meltytech Shotcut 25.10.31 is vulnerable to Buffer Overflow. A memory access violation occurs when processing MLT project files with manipulated width and height parameters. By setting these values to extremely large numbers, the application attempts to allocate excessive memory during image processing, triggering a buffer overflow in the mlt_image_fill_white function.
EPSS 0.41% · 32.8th percentile
Risk Scores
CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.41%
32.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| meltytech | shotcut | 25.10.31 |
| n/a | n/a | n/a |
Timeline
- Nov 18, 2025 CVE ID Reserved
- Dec 16, 2025 CVE Published
- Dec 17, 2025 EPSS Score
- Dec 17, 2025 CVE Updated
- Dec 21, 2025 EPSS Score
- Dec 26, 2025 EPSS Score
- Dec 30, 2025 EPSS Score
- Jan 4, 2026 EPSS Score
- Jan 8, 2026 EPSS Score
- Jan 13, 2026 EPSS Score
- Jan 17, 2026 EPSS Score
- Jan 22, 2026 EPSS Score