{"action":"Upgrade openh264-sys2 to 0.8.0 or later.","affected":[{"fixed":"0.8.0","introduced":"0"}],"component":"openh264-sys2","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.8.0"],"ghsa_id":"GHSA-5pmw-9j92-3c4c","id":"tcs_01M5KET5A28PEP0TGF8RYWDVMQ","modified_at":"2025-10-28T06:29:23.180686Z","published_at":"2025-02-24T18:27:25Z","references":["https://osv.dev/vulnerability/GHSA-5pmw-9j92-3c4c","https://nvd.nist.gov/vuln/detail/CVE-2025-27091","https://github.com/cisco/openh264/pull/3818","https://github.com/ralfbiedert/openh264-rs/commit/3a822fff0b4c9a984622ca2b179fe8898ac54b14","https://github.com/ralfbiedert/openh264-rs","https://rustsec.org/advisories/RUSTSEC-2025-0008.html"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-5pmw-9j92-3c4c","url":"https://osv.dev/vulnerability/GHSA-5pmw-9j92-3c4c"}],"summary":"OpenH264 Rust API Openh264 Decoding Functions Heap Overflow Vulnerability"}