CVE catalog
CVE-2025-49589
pcsx2: CVE-2025-49589
- Severity
- Medium
- Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.31% · Oct 25, 2026
PCSX2 is a free and open-source PlayStation 2 (PS2) emulator. A stack-based buffer overflow exists in the Kprintf_HLE function of PCSX2 versions up to 2.3.414. Opening a disc image that logs a specially crafted message may allow a remote attacker to execute arbitrary code if the user enabled IOP Console Logging. This vulnerability is fixed in 2.3.414.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | pcsx2 | sid | 2.8.2+dfsg-2 | fixed |
| Debian | pcsx2 | forky | 2.8.2+dfsg-2 | fixed |
| Debian | pcsx2 | trixie | 1.6.0+dfsg-3+deb13u1 | fixed |
| Debian | pcsx2 | bookworm | 1.6.0+dfsg-2 | vulnerable |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | pcsx2 | source | sid | 2.4.0+dfsg-1 | not yet assigned | Not reported | [1107756] |
| Debian | pcsx2 | source | forky | 2.4.0+dfsg-1 | not yet assigned | Not reported | [1107756] |
| Debian | pcsx2 | source | trixie | 1.6.0+dfsg-3+deb13u1 | not yet assigned | Not reported | [1107756] |
| Debian | pcsx2 | source | bookworm | (unfixed) | not yet assigned | Not reported | [1107756] |
Notes
[bookworm] pcsx2: Minor issue
OpenFactory catalog packages
No matching packages in this catalog.
Observed: