CNNVD-202512-067 Information

Dec 01, 2025 cve

CNNVD ID

CNNVD-202512-067

CVE-2025-63095

CNNVD Published: 2025-12-01

Description (Chinese)

Hello Video Codec是Tempus Ex开源的一个视频编解码器。 Hello Video Codec v0.1.0版本存在安全漏洞，该漏洞源于BitstreamWriter::write_bits函数输入验证不当，可能导致拒绝服务攻击。

Description (English)

Hello Video Code is a video decoding device from Tempus Ex Open Source. There is a security loophole in version Hello Video Code v. 0.1.0, which stems from the incorrect validation of the BitstreamWriter::write bits function, which may lead to a denial of service attack.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Tempus Ex

Published

2025-12-01

Last Modified

2026-02-24

References

https://gist.github.com/thesmartshadow/b092e2493821491b981a069847a33064 https://github.com/tempus-ex/hello-video-codec https://github.com/tempus-ex/hello-video-codec/blob/3e9551c699311ea12ad7f2fce9562fbc990d524c/src/bitstream.rs https://github.com/tempus-ex/hello-video-codec/tree/3e9551c699311ea12ad7f2fce9562fbc990d524c https://access.redhat.com/security/cve/cve-2025-63095

Share on: