CVE-2025-65834
Last modified
CVE-2025-65834 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. Meltytech Shotcut 25.10.31 is vulnerable to Buffer Overflow. A memory access violation occurs when processing MLT project files with manipulated width and height parameters. EPSS estimates a 0.34% chance of exploitation in the next 30 days.
Description
Meltytech Shotcut 25.10.31 is vulnerable to Buffer Overflow. A memory access violation occurs when processing MLT project files with manipulated width and height parameters. By setting these values to extremely large numbers, the application attempts to allocate excessive memory during image processing, triggering a buffer overflow in the mlt_image_fill_white function.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Meltytech | Shotcut | 25.10.31 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-65834?
How severe is CVE-2025-65834?
How do I fix CVE-2025-65834?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-65828An unauthenticated attacker within proximity of the Meatmeet…6.5
- CVE-2025-65829The ESP32 system on a chip (SoC) that powers the Meatmeet ba…6.8
- CVE-2025-6583A vulnerability, which was classified as critical, was found…8.8
- CVE-2025-65830Due to a lack of certificate validation, all traffic from th…9.1
- CVE-2025-65831The application uses an insecure hashing algorithm (MD5) to …7.5
- CVE-2025-65832The mobile application insecurely handles information stored…4.6
- CVE-2025-65835The Cordova plugin cordova-plugin-x-socialsharing (SocialSha…6.2
- CVE-2025-65836PublicCMS V5.202506.b is vulnerable to SSRF. in the chat int…9.1
- CVE-2025-65837PublicCMS V5.202506.b is vulnerable to Cross Site Scripting …5.4
- CVE-2025-65838PublicCMS V5.202506.b is vulnerable to path traversal via th…7.5
- CVE-2025-65840PublicCMS V5.202506.b is vulnerable to Cross Site Request Fo…8.8
- CVE-2025-65841Aquarius Desktop 3.0.069 for macOS stores user authenticatio…6.2
Are you affected by CVE-2025-65834?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST