CVE-2025-65834

Meltytech Shotcut 25.10.31 is vulnerable to Buffer Overflow. A memory access violation occurs when processing MLT project files with manipulated width and height parameters. By setting these values to extremely large numbers, the application attempts to allocate excessive memory during image processing, triggering a buffer overflow in the mlt_image_fill_white function.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://bytescan.net/CVE/cve-2025-65834.html	Third Party Advisory
https://sourceforge.net/projects/shotcut/files/v25.10.31/shotcut-macos-25.10.31.dmg/download	Product

Configurations

Configuration 1 (hide)

cpe:2.3:a:meltytech:shotcut:25.10.31:*:*:*:*:*:*:*

History

05 Oct 2026, 18:10

Type	Values Removed	Values Added
Summary		(es) Meltytech Shotcut 25.10.31 es vulnerable a desbordamiento de búfer. Una violación de acceso a memoria ocurre al procesar archivos de proyecto MLT con parámetros de ancho y alto manipulados. Al establecer estos valores en números extremadamente grandes, la aplicación intenta asignar memoria excesiva durante el procesamiento de imágenes, lo que desencadena un desbordamiento de búfer en la función mlt_image_fill_white.

Information

Published : 2025-12-16 20:15

Updated : 2026-10-13 11:10

NVD link : CVE-2025-65834

Mitre link : CVE-2025-65834

CVE.ORG link : CVE-2025-65834

JSON object : View

Products Affected

meltytech

shotcut

CWE

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

{"id": "CVE-2025-65834", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-65834", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-12-17T14:41:27.181235Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2025-12-16T20:15:48.937", "references": [{"url": "https://bytescan.net/CVE/cve-2025-65834.html", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://sourceforge.net/projects/shotcut/files/v25.10.31/shotcut-macos-25.10.31.dmg/download", "tags": ["Product"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-120"}]}], "descriptions": [{"lang": "en", "value": "Meltytech Shotcut 25.10.31 is vulnerable to Buffer Overflow. A memory access violation occurs when processing MLT project files with manipulated width and height parameters. By setting these values to extremely large numbers, the application attempts to allocate excessive memory during image processing, triggering a buffer overflow in the mlt_image_fill_white function."}, {"lang": "es", "value": "Meltytech Shotcut 25.10.31 es vulnerable a desbordamiento de b\u00fafer. Una violaci\u00f3n de acceso a memoria ocurre al procesar archivos de proyecto MLT con par\u00e1metros de ancho y alto manipulados. Al establecer estos valores en n\u00fameros extremadamente grandes, la aplicaci\u00f3n intenta asignar memoria excesiva durante el procesamiento de im\u00e1genes, lo que desencadena un desbordamiento de b\u00fafer en la funci\u00f3n mlt_image_fill_white."}], "lastModified": "2026-10-13T11:10:00.203", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:meltytech:shotcut:25.10.31:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CF7FB212-9F4E-44FE-9B8C-0F51ECA7747C"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}