PT-2025-48451 · Tempus Ex · Hello-Video-Codec

Ali Firas + 1 · Publicado 2025-12-01 · Atualizado 2025-12-31 · CVE-2025-63095

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Tempus Ex hello-video-codec version 0.1.0

Description A flaw exists in the BitstreamWriter::write bits() function that allows for a Denial of Service (DoS) through crafted input due to improper input validation.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Correção

RCE

DoS

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2025-63095

Produtos afetados

Hello-Video-Codec

Referências · 11

• https://github.com/tempus-ex/hello-video-codec/tree/3e9551c699311ea12ad7f2fce9562fbc990d524c · Nota
• https://github.com/tempus-ex/hello-video-codec · Nota
• https://github.com/tempus-ex/hello-video-codec/blob/3e9551c699311ea12ad7f2fce9562fbc990d524c/src/bitstream.rs · Nota
• https://gist.github.com/thesmartshadow/b092e2493821491b981a069847a33064 · Correção
• https://twitter.com/CVEnew/status/1995519587295572357 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/1995568675810615495 · Publicação no Twitter
• https://t.me/cveNotify/146652 · Publicação no Telegram
• https://t.me/CVEtracker/38551 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-63095 · Aviso do Fabricante
• https://twitter.com/Alishmery2/status/2006247016792309884 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-63095 · Nota de Segurança