CVE-2025-54957

An issue was discovered in Dolby UDC 4.5 through 4.13. A crash of the DD+ decoder process can occur when a malformed DD+ bitstream is processed. When Evolution data is processed by evo_priv.c from the DD+ bitstream, the decoder writes that data into a buffer. The length calculation for a write can overflow due to an integer wraparound. This can lead to the allocated buffer being too small, and the out-of-bounds check of the subsequent write to be ineffective, leading to an out-of-bounds write.

• CWE-190
• CWE-787

• https://professional.dolby.com/siteassets/pdfs/dolby-security-advisory-CVE-2025-54957-Oct-14-25.pdf
• https://project-zero.issues.chromium.org/issues/428075495
• https://projectzero.google/2026/01/pixel-0-click-part-1.html

Published

Oct 20, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-5495A vulnerability was found in Netgear WNR614 1.1.0.28_1.0.1WW…9.8
• CVE-2025-54950An out-of-bounds access vulnerability in the loading of Exec…9.8
• CVE-2025-54951A group of related buffer overflow vulnerabilities in the lo…9.8
• CVE-2025-54952An integer overflow vulnerability in the loading of ExecuTor…9.8
• CVE-2025-54955OpenNebula Community Edition (CE) before 7.0.0 and Enterpris…8.1
• CVE-2025-54956The gh package before 1.5.0 for R delivers an HTTP response …3.2
• CVE-2025-54958Powered BLUE 870 versions 0.20130927 and prior contain an OS…6.3
• CVE-2025-54959Powered BLUE Server versions 0.20130927 and prior contain a …5.3
• CVE-2025-5496ZohoCorp ManageEngine Endpoint Central versions earlier than…3.3
• CVE-2025-54962/edit-user in webserver in OpenPLC Runtime 3 through 9cd8f1b…6.4
• CVE-2025-54963An issue was discovered in BAE SOCET GXP before 4.6.0.2. An …6.5
• CVE-2025-54964An issue was discovered in BAE SOCET GXP before 4.6.0.2. An …8.4