PT-2025-51033 · Pcsx2+1 · Pcsx2+1

Published 2025-12-12 · Updated 2026-01-09 · CVE-2025-67749

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions PCSX2 versions 2.5.377 and below

Description PCSX2, a PlayStation 2 emulator, contains a flaw where an unchecked offset and size within memcpy operations in the CDVD SCMD 0x91 and SCMD 0x8F handlers can lead to an out-of-bounds read from emulator memory. A specially designed disc image or ELF file can trigger this issue. The offset and size are determined by MG header fields, allowing a crafted ELF to read data beyond the mg buffer boundary and reflect it into emulated memory.

Recommendations Update to version 2.5.378 or later.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2025-67749

GHSA-69WG-97FX-8J5W

Affected Products

Debian

Pcsx2

References · 16

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/67xxx/CVE-2025-67749.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-67749 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-67749 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-67749 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-67749 · Security Note
• https://osv.dev/vulnerability/CVE-2025-67749 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-67749 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-67749 · Vendor Advisory
• https://github.com/PCSX2/pcsx2/releases/tag/v2.5.378 · Note
• https://github.com/PCSX2/pcsx2/commit/0b73eabd9ac19a5e290e7bee48d15be24e7b7d1b · Note
• https://github.com/PCSX2/pcsx2/security/advisories/GHSA-69wg-97fx-8j5w · Note
• https://github.com/PCSX2/pcsx2/pull/13693 · Note
• https://twitter.com/dailycve/status/2009739092783677931 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1999647115279024168 · Twitter Post
• https://t.me/CVEtracker/39676 · Telegram Post