Out-of-Bounds Read Vulnerability in PCSX2 PlayStation 2 Emulator

CVE-2025-67749

What is CVE-2025-67749?

The vulnerability in PCSX2 arises from an unchecked offset and size within its CDVD SCMD 0x91 and SCMD 0x8F handlers. This flaw permits an attacker to use a specially crafted disc image or ELF, allowing for an out-of-bounds read from the emulator's memory. As the data read is controlled via MG header fields, it enables malicious actors to retrieve data from outside the intended memory bounds, which can lead to information disclosure or further exploitation within the emulated environment. This issue has been addressed in PCSX2 version 2.5.378.

References