CVE-2025-47807

Опубликовано: 07 авг. 2025

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

In GStreamer through 1.26.1, the subparse plugin's subrip_unescape_formatting function may dereference a NULL pointer while parsing a subtitle file, leading to a crash.

Ссылки

https://github.com/atredispartners/advisories/blob/master/2025/ATREDIS-2025-0003.md
Exploit
Third Party Advisory
https://gstreamer.freedesktop.org/security/
Vendor Advisory
https://github.com/atredispartners/advisories/blob/master/2025/ATREDIS-2025-0003.md
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gstreamer_project:gstreamer:*:*:*:*:*:*:*:*

Версия до 1.26.2 (исключая)

EPSS

Процентиль: 1%

0.00013

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-476

Связанные уязвимости

CVE-2025-47807

CVSS3: 5.5

ubuntu

11 дней назад

In GStreamer through 1.26.1, the subparse plugin's subrip_unescape_formatting function may dereference a NULL pointer while parsing a subtitle file, leading to a crash.

CVE-2025-47807

CVSS3: 5.6

redhat

12 дней назад

In GStreamer through 1.26.1, the subparse plugin's subrip_unescape_formatting function may dereference a NULL pointer while parsing a subtitle file, leading to a crash.

CVE-2025-47807

CVSS3: 5.5

debian

11 дней назад

In GStreamer through 1.26.1, the subparse plugin's subrip_unescape_for ...

GHSA-rwxm-pxw4-qv8v

CVSS3: 5.5

github

11 дней назад

In GStreamer through 1.26.1, the subparse plugin's subrip_unescape_formatting function may dereference a NULL pointer while parsing a subtitle file, leading to a crash.

SUSE-SU-2025:02304-1

suse-cvrf

около 1 месяца назад

Security update for gstreamer-plugins-base

EPSS

Процентиль: 1%

0.00013

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-476