CVE-2025-49589: PCSX2

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

PCSX2 is a free and open-source PlayStation 2 (PS2) emulator. A stack-based buffer overflow exists in the Kprintf_HLE function of PCSX2 versions up to 2.3.414. Opening a disc image that logs a specially crafted message may allow a remote attacker to execute arbitrary code if the user enabled IOP Console Logging. This vulnerability is fixed in 2.3.414.

Affected products

• PCSX2 PCSX2: before 2.3.414 (fixed in 2.3.414)

Published 2025-06-12. Last modified 2026-06-17.