What is the CVSS score of EUVD-2025-200020?

EUVD-2025-200020 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.1%.

Which versions of Ubuntu are affected by EUVD-2025-200020?

CVE-2025-65404 presents notable security risk, a buffer overflow vulnerability rated CVSS 6.5. Exploitation could cause memory corruption or application crashes.. A patch is available.

Is there a public PoC exploit available for EUVD-2025-200020?

Yes, a public proof-of-concept exploit is available for EUVD-2025-200020. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate EUVD-2025-200020?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Ubuntu EUVD-2025-200020

| CVE-2025-65404 MEDIUM

Classic Buffer Overflow (CWE-120)

2025-12-01 cve@mitre.org

Denial Of Service Buffer Overflow Ubuntu Debian Streaming Media Suse

6.5

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

EUVD ID Assigned

Mar 15, 2026 - 13:34 euvd

EUVD-2025-200020

Analysis Generated

Mar 15, 2026 - 13:34 vuln.today

PoC Detected

Dec 23, 2025 - 13:51 vuln.today

Public exploit code

CVE Published

Dec 01, 2025 - 16:15 nvd

MEDIUM 6.5

DescriptionNVD

A buffer overflow in the getSideInfo2() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via a crafted MP3 stream.

Analysis

A buffer overflow in the getSideInfo2() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via a crafted MP3 stream.

Technical ContextAI

A buffer overflow occurs when data written to a buffer exceeds its allocated size, potentially overwriting adjacent memory and corrupting program state. This vulnerability is classified as Classic Buffer Overflow (CWE-120).

RemediationAI

Use memory-safe languages or bounds-checked functions. Enable ASLR, DEP/NX, and stack canaries. Apply vendor patches promptly.

Vendor StatusVendor

Ubuntu

Priority: Medium

liblivemedia

Release	Status	Version
xenial	needs-triage	-
bionic	needs-triage	-
focal	needs-triage	-
jammy	DNE	-
noble	DNE	-
plucky	DNE	-
questing	DNE	-
upstream	needs-triage	-

Debian

liblivemedia

Release	Status	Fixed Version	Urgency
(unstable)	fixed	(unfixed)	-

SUSE

Severity: Medium

EUVD-2025-200020 vulnerability details – vuln.today

Back

Ubuntu EUVD-2025-200020

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

Analysis

Technical ContextAI

RemediationAI

Vendor StatusVendor

Ubuntu

Debian

SUSE

Share

External POC / Exploit Code