VDB
DEBIAN-CVE-2025-9951
DEBIAN-CVE-2025-9951
PUBLISHED
CVSS 7.199999809265137 HIGH
A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execution or cause denial of service via the channel definition cdef atom of JPEG2000.
Risk Scores
CVSS 4.0
7.199999809265137
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:14 | ffmpeg | 0, *, 0 |
| Debian:11 | ffmpeg | 7:4.3.4-0+deb11u1, 7:4.3.5-0+deb11u1, 7:4.3.6-0+deb11u1 |
| Debian:12 | ffmpeg | 0, 7:5.1.3-1, 7:5.1.3-2 |
| Debian:13 | ffmpeg | 0, *, 0 |
Timeline
- Sep 9, 2025 CVE Published
- Apr 28, 2026 CVE Updated