PT-2025-48451 · Tempus Ex · Hello-Video-Codec

Ali Firas + 1 · Published 2025-12-01 · Updated 2025-12-31 · CVE-2025-63095

Positive Technologies · (AI Summary)

CVSS v3.1

6.5

Medium

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Tempus Ex hello-video-codec version 0.1.0

Description A flaw exists in the BitstreamWriter::write bits() function that allows for a Denial of Service (DoS) through crafted input due to improper input validation.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Fix

RCE

DoS

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2025-63095

Affected Products

Hello-Video-Codec

References · 11

• https://gist.github.com/thesmartshadow/b092e2493821491b981a069847a33064 · Patch
• https://osv.dev/vulnerability/CVE-2025-63095 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-63095 · Security Note
• https://github.com/tempus-ex/hello-video-codec/tree/3e9551c699311ea12ad7f2fce9562fbc990d524c · Note
• https://github.com/tempus-ex/hello-video-codec · Note
• https://github.com/tempus-ex/hello-video-codec/blob/3e9551c699311ea12ad7f2fce9562fbc990d524c/src/bitstream.rs · Note
• https://twitter.com/CVEnew/status/1995519587295572357 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1995568675810615495 · Twitter Post
• https://t.me/cveNotify/146652 · Telegram Post
• https://t.me/CVEtracker/38551 · Telegram Post
• https://twitter.com/Alishmery2/status/2006247016792309884 · Twitter Post