VULNERABILITY INTELLIGENCE

CVE-2025-65834

CVSS score9.8 CRITICAL
EPSS probability0.41%
CISA KEVNot currently listed
Published2025-12-16
Last modified2026-10-13
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Meltytech Shotcut 25.10.31 is vulnerable to Buffer Overflow. A memory access violation occurs when processing MLT project files with manipulated width and height parameters. By setting these values to extremely large numbers, the application attempts to allocate excessive memory during image processing, triggering a buffer overflow in the mlt_image_fill_white function.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-120

Primary references