VULNERABILITY INTELLIGENCE

CVE-2025-9951

EPSS probability0.44%
CISA KEVNot currently listed
Published2025-09-09
Last modified2026-10-19

Description

A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execution or cause denial of service via the channel definition cdef atom of JPEG2000.

Weakness classification

  • cve-coordination@google.com: CWE-122

Primary references