CVE-2025-47806

Опубликовано: 07 авг. 2025

Источник: nvd

CVSS3: 5.6

EPSS Низкий

Описание

In GStreamer through 1.26.1, the subparse plugin's parse_subrip_time function may write data past the bounds of a stack buffer, leading to a crash.

Ссылки

https://github.com/atredispartners/advisories/blob/master/2025/ATREDIS-2025-0003.md
Exploit
Third Party Advisory
https://gstreamer.freedesktop.org/security/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gstreamer_project:gstreamer:*:*:*:*:*:*:*:*

Версия до 1.26.2 (исключая)

EPSS

Процентиль: 14%

0.00049

Низкий

5.6 Medium

CVSS3

Дефекты

CWE-121

Связанные уязвимости

CVE-2025-47806

CVSS3: 5.6

ubuntu

11 дней назад

In GStreamer through 1.26.1, the subparse plugin's parse_subrip_time function may write data past the bounds of a stack buffer, leading to a crash.

CVE-2025-47806

CVSS3: 5.6

redhat

12 дней назад

In GStreamer through 1.26.1, the subparse plugin's parse_subrip_time function may write data past the bounds of a stack buffer, leading to a crash.

CVE-2025-47806

CVSS3: 5.6

debian

11 дней назад

In GStreamer through 1.26.1, the subparse plugin's parse_subrip_time f ...

GHSA-2g8j-23q2-f55c

CVSS3: 5.6

github

11 дней назад

In GStreamer through 1.26.1, the subparse plugin's parse_subrip_time function may write data past the bounds of a stack buffer, leading to a crash.

SUSE-SU-2025:02304-1

suse-cvrf

около 1 месяца назад

Security update for gstreamer-plugins-base

EPSS

Процентиль: 14%

0.00049

Низкий

5.6 Medium

CVSS3

Дефекты

CWE-121