CVE-2025-67749: PCSX2 has an Out-of-bounds Read due to unchecked offset and size passed to memcpy
PCSX2 is a free and open-source PlayStation 2 (PS2) emulator. In versions 2.5.377 and below, an unchecked offset and size used in a memcpy operation inside PCSX2's CDVD SCMD 0x91 and SCMD 0x8F handlers allow a specially crafted disc image or ELF to cause an out-of-bounds read from emulator memory. Because the offset and size is controlled through MG header fields, a specially crafted ELF can read data beyond the bounds of mgbuffer and have it reflected back into emulated memory. This issue is fixed in version 2.5.378.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-67749?
CVE-2025-67749 has been classified as a moderate severity vulnerability due to the potential for out-of-bounds read access.
How do I fix CVE-2025-67749?
To fix CVE-2025-67749, users should upgrade to PCSX2 version 2.5.378 or later.
What causes CVE-2025-67749 in PCSX2?
CVE-2025-67749 is caused by unchecked offset and size parameters used in a memcpy operation in the CDVD SCMD handlers.
What versions of PCSX2 are affected by CVE-2025-67749?
PCSX2 versions 2.5.377 and below are affected by CVE-2025-67749.
What risks do users face with CVE-2025-67749?
Users face risks of out-of-bounds read vulnerabilities that could lead to unintended information disclosure.