PT-2025-7626 · Openh264+3 · Openh264+3

Andrew Calvano + 1 · Published 2025-02-20 · Updated 2025-10-10 · CVE-2025-27091

Positive Technologies (AI Summary)

CVSS v4.0

8.6

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions OpenH264 versions 2.5.0 and earlier

Description OpenH264 contains a heap overflow vulnerability in its decoding functions. This issue is due to a race condition occurring between a Sequence Parameter Set (SPS) memory allocation and a subsequent non-Instantaneous Decoder Refresh (non-IDR) Network Abstraction Layer (NAL) unit memory usage. An attacker can exploit this by crafting a malicious bitstream and tricking a user into processing a video containing it. Successful exploitation could lead to a crash or potentially allow the attacker to execute arbitrary commands. Both Scalable Video Coding (SVC) and Advanced Video Coding (AVC) modes are affected.

Recommendations Upgrade OpenH264 to version 2.6.0 or later.

Exploit

Fix

RCE

Memory Corruption

Heap Based Buffer Overflow

Weakness Enumeration

CWE-787

CWE-1395

CWE-122

Related Identifiers

BDU:2025-02022

CVE-2025-27091

DSA-5870-1

GHSA-5PMW-9J92-3C4C

GHSA-M99Q-5J7X-7M9X

RUSTSEC-2025-0008

Affected Products

Astra Linux

Debian

Openh264

Red Os

References · 56

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/27xxx/CVE-2025-27091.json · Exploit
• https://github.com/cisco/openh264/security/advisories/GHSA-m99q-5j7x-7m9x · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-27091 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-27091 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0811SE18 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-1020SE47 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-27091 · Security Note
• https://bdu.fstec.ru/vul/2025-02022 · Security Note
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0923SE17 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-27091 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-5pmw-9j92-3c4c · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5870-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-27091 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-27091 · Security Note