CVE-2025-63095

Medium · 6.5

CVSS

6.5

EPSS

0.4%

Published

Dec 1, 2025

CISA due date

—

The record

Improper input validation in the BitstreamWriter::write_bits() function of Tempus Ex hello-video-codec v0.1.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.

Affected packages

Ecosystem	Package	Introduced	Fixed