CVE-2025-65834
CriticalSummary
Meltytech Shotcut version 25.10.31 is vulnerable to Buffer Overflow. A memory access violation occurs when processing MLT project files with manipulated width and height parameters. Setting these values to extremely large numbers causes excessive memory allocation during image processing, triggering a buffer overflow in the mlt_image_fill_white function.
Risk Assessment
An attacker can cause application crashes or potentially execute arbitrary code, potentially leading to system integrity compromise.
Recommendation
Upgrade Shotcut to the latest version with the fix and avoid opening untrusted MLT project files.
Original NVD description (English source)
Meltytech Shotcut 25.10.31 is vulnerable to Buffer Overflow. A memory access violation occurs when processing MLT project files with manipulated width and height parameters. By setting these values to extremely large numbers, the application attempts to allocate excessive memory during image processing, triggering a buffer overflow in the mlt_image_fill_white function.