Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-47183

Опубликовано: 07 авг. 2025
Источник: nvd
CVSS3: 6.6
EPSS Низкий

Описание

In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_tree function may read past the end of a heap buffer while parsing an MP4 file, leading to information disclosure.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:gstreamer_project:gstreamer:*:*:*:*:*:*:*:*
Версия до 1.26.2 (исключая)

EPSS

Процентиль: 4%
0.00021
Низкий

6.6 Medium

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 6.6
ubuntu
11 дней назад

In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_tree function may read past the end of a heap buffer while parsing an MP4 file, leading to information disclosure.

CVSS3: 5.6
redhat
12 дней назад

In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_tree function may read past the end of a heap buffer while parsing an MP4 file, leading to information disclosure.

CVSS3: 6.6
debian
11 дней назад

In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_tree fu ...

suse-cvrf
около 1 месяца назад

Security update for gstreamer-plugins-good

CVSS3: 6.6
github
11 дней назад

In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_tree function may read past the end of a heap buffer while parsing an MP4 file, leading to information disclosure.

EPSS

Процентиль: 4%
0.00021
Низкий

6.6 Medium

CVSS3

Дефекты

CWE-125