CVE-2025-63095

6.5 mediumEPSS 0.4%

Medium (6.5) in tempus-ex hello-video-codec. EPSS 0.4% chance of exploitation in the next 30 days.

Improper input validation in the BitstreamWriter::write_bits() function of Tempus Ex hello-video-codec v0.1.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 31% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2025-12-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

tempus-ex:hello-video-codec

References

https://gist.github.com/thesmartshadow/b092e2493821491b981a069847a33064
https://github.com/tempus-ex/hello-video-codec
https://github.com/tempus-ex/hello-video-codec/blob/3e9551c699311ea12ad7f2fce9562fbc990d524c/src/bitstream.rs
https://github.com/tempus-ex/hello-video-codec/tree/3e9551c699311ea12ad7f2fce9562fbc990d524c

Check your stack JSON