A security vulnerability has been detected in Mupen64Plus up to 2.6.0. The affected element is the function write_is_viewer of the file src/device/cart/is_viewer.c. The manipulation leads to integer overflow. It is possible to initiate the attack remotely. The attack is considered to have high complexity. The exploitability is described as difficult. The exploit has been disclosed publicly and may be used. The identifier of the patch is 3984137fc0c44110f1ef876adb008885b05a6e18. To fix this issue, it is recommended to deploy a patch.

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-2406078e57 advisory.

    Patch CVE-2025-29366 and CVE-2025-29366

    There should be no change in behaviour.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-7a40e176ed advisory.

    Patch CVE-2025-29366 and CVE-2025-29366     There should be no change in behaviour.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A security vulnerability has been detected in Mupen64Plus up to 2.6.0. The affected element is the     function write_is_viewer of the file src/device/cart/is_viewer.c. The manipulation leads to integer     overflow. It is possible to initiate the attack remotely. The attack is considered to have high     complexity. The exploitability is described as difficult. The exploit has been disclosed publicly and may     be used. The identifier of the patch is 3984137fc0c44110f1ef876adb008885b05a6e18. To fix this issue, it is     recommended to deploy a patch. (CVE-2025-9688)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
274464	Fedora 41 : mupen64plus (2025-2406078e57)	Nessus	Fedora Local Security Checks	low
274378	Fedora 42 : mupen64plus (2025-7a40e176ed)	Nessus	Fedora Local Security Checks	low
261198	Linux Distros Unpatched Vulnerability : CVE-2025-9688	Nessus	Misc.	low

Detections

Analytics

CVE-2025-9688

low

Tenable Plugins

low

low

low