CVE-2025-9951 – Remote code execution via Heap Buffer Overflow in FFmpeg JPEG2000

CVE ID : CVE-2025-9951

Published : Sept. 9, 2025, 2:15 p.m. | 39 minutes ago

Description : A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execution or cause denial of service via the channel definition cdef atom of JPEG2000.

Severity: 7.2 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…