CVE-2025-67749 Details
Description
PCSX2 is a free and open-source PlayStation 2 (PS2) emulator. In versions 2.5.377 and below, an unchecked offset and size used in a memcpy operation inside PCSX2's CDVD SCMD 0x91 and SCMD 0x8F handlers allow a specially crafted disc image or ELF to cause an out-of-bounds read from emulator memory. Because the offset and size is controlled through MG header fields, a specially crafted ELF can read data beyond the bounds of mg_buffer and have it reflected back into emulated memory. This issue is fixed in version 2.5.378.
A vulnerability allowing out-of-bounds read has been identified in PCSX2, a PlayStation 2 emulator, in versions prior to 2.5.378. The issue arises from an unchecked offset and size in a memcpy operation within the CDVD SCMD 0x91 and SCMD 0x8F handlers. This flaw allows a specially crafted disc image or ELF file to read data beyond the limits of the mg_buffer, with the excess data being mirrored into emulated memory. The vulnerability can be exploited by manipulating the MG header fields of an ELF file.
Users can upgrade to PCSX2 version 2.5.378, which addresses the vulnerability by implementing proper bounds checking before memory operations. The latest version is available on the PCSX2 GitHub Releases page.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Dec 12, 2025CISA-ADP
Assessed Dec 15, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/PCSX2/pcsx2/commit/0b73eabd9ac19a5e290e7bee48d15be24e7b7d1b | [email protected] | Source CodeVendor |
| https://github.com/PCSX2/pcsx2/releases/tag/v2.5.378 | [email protected] | Release NotesVendor |
| https://github.com/PCSX2/pcsx2/security/advisories/GHSA-69wg-97fx-8j5w | [email protected] | AdvisoryRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-125 | Out-of-bounds Read | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| PCSX2 | All versions |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Dec 12, 2025 | New CVE Received | [email protected] |