Heap-Based Buffer Overflow in Microsoft MPEG-2 Video Extension
CVE-2025-48805
7.8HIGH
Key Information:
- Vendor
Microsoft
- Status
- Vendor
- CVE Published:
- 8 July 2025
What is CVE-2025-48805?
A heap-based buffer overflow vulnerability exists in the Microsoft MPEG-2 Video Extension, which could allow an authorized attacker to execute arbitrary code on the local machine. When an attacker successfully exploits this vulnerability, they can manipulate memory allocations, potentially leading to unauthorized actions or access to sensitive information. It is essential for users of the affected product to apply available patches or workarounds to mitigate the risks associated with this vulnerability.
Affected Version(s)
Windows 10 Version 1507 32-bit Systems 10.0.10240.0 < 10.0.10240.21073
Windows 10 Version 1607 32-bit Systems 10.0.14393.0 < 10.0.14393.8246
Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.7558