CVE-2025-49589: 
Linux Debian vulnerability analysis and mitigation

CVE-2025-49589 affects PCSX2, a free and open-source PlayStation 2 (PS2) emulator. The vulnerability was discovered and disclosed in June 2025, specifically affecting versions up to 2.3.414. A stack-based buffer overflow exists in the Kprintf_HLE function that could be exploited when opening a disc image that logs a specially crafted message while IOP Console Logging is enabled (NVD, Wiz).

The vulnerability is classified as a stack-based buffer overflow (CWE-121) that exists in the Kprintf_HLE function. The issue has been assigned a CVSS 4.0 Base Score of 6.1 (Medium) with the vector string CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:N/VI:H/VA:H/SC:H/SI:H/SA:H (NVD).

If successfully exploited, this vulnerability could allow a remote attacker to execute arbitrary code on the affected system when a user has enabled IOP Console Logging. The impact particularly affects the integrity and availability of the system (Wiz).

The vulnerability has been fixed in PCSX2 version 2.3.414. Users are strongly advised to upgrade to this version or later to protect against this vulnerability. The fix includes proper buffer overflow checks in the Kprintf_HLE function (GitHub PR, GitHub PR).