Product:
jpeg2000dec FFmpeg
Summary
A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execution or cause denial of service via the channel definition cdef atom of JPEG2000. This vulnerability poses a significant risk due to its potential impact on system integrity and availability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.2 | CVE-2025-9951 |
Exploitation
To exploit this vulnerability, an attacker can craft a malicious JPEG2000 file that triggers the heap-buffer overflow when processed by the jpeg2000dec FFmpeg. By sending this specially crafted file over a network, the attacker can execute arbitrary code or cause a denial of service on the affected system.
Affected Products
- jpeg2000dec FFmpeg: Vulnerable to heap-buffer-overflow leading to potential remote code execution or denial of service.
Mitigation
To mitigate this vulnerability, users should update to the latest version of jpeg2000dec FFmpeg that addresses this issue. Additionally, implementing network security measures to filter untrusted JPEG2000 files can help reduce the risk of exploitation.