CVE-2025-67749: PCSX2

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

PCSX2 is a free and open-source PlayStation 2 (PS2) emulator. In versions 2.5.377 and below, an unchecked offset and size used in a memcpy operation inside PCSX2's CDVD SCMD 0x91 and SCMD 0x8F handlers allow a specially crafted disc image or ELF to cause an out-of-bounds read from emulator memory. Because the offset and size is controlled through MG header fields, a specially crafted ELF can read data beyond the bounds of mg_buffer and have it reflected back into emulated memory. This issue is fixed in version 2.5.378.

Affected products

• PCSX2 PCSX2: before 2.5.378 (fixed in 2.5.378)

Published 2025-12-12. Last modified 2026-06-17.