Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2025-29366

Good to know:

icon

Date: August 21, 2025

In mupen64plus v2.6.0 there is an array overflow vulnerability in the write_rdram_regs and write_rdram_regs functions, which enables executing arbitrary commands on the host machine.

Severity Score

Related Resources (7)

https://github.com/mupen64plus/mupen64plus-core/blob/2.6.0/src/device/rdram/rdram.c#L159
https://github.com/Giles-one/mupen64plusEscape/tree/main/BUG1
https://github.com/mupen64plus/mupen64plus-core/blob/master/src/device/rdram/rdram.h#L60
https://gist.github.com/Giles-one/f4ea405c2a26000bb4ff4cfb9622be49
https://nvd.nist.gov/vuln/detail/CVE-2025-29366
https://github.com/mupen64plus/mupen64plus-core/blob/master/src/device/rdram/rdram.h#L50
https://www.mend.io/vulnerability-database/CVE-2025-29366

Severity Score

Weakness Type (CWE)

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-119

Improper Validation of Array Index

CWE-129

Top Fix

icon

Upgrade Version

Upgrade to version https://github.com/mupen64plus/mupen64plus-core.git - no_fix

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): HIGH
Availability (A): HIGH

Do you need more information?

Contact Us