CVE-2025-9951 — Remote code execution via Heap Buffer Overflow in FFmpeg JPEG2000
A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execution or cause denial of service via the channel definitio…
Published: 2025-09-09 · CVSS: 7.2 · CVSS 4.0
A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execution or cause denial of service via the channel definition cdef atom of JPEG2000.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7