CVE-2025-47808

Опубликовано: 07 авг. 2025

Источник: nvd

CVSS3: 5.6

EPSS Низкий

Описание

In GStreamer through 1.26.1, the subparse plugin's tmplayer_parse_line function may dereference a NULL pointer while parsing a subtitle file, leading to a crash.

Ссылки

https://github.com/atredispartners/advisories/blob/master/2025/ATREDIS-2025-0003.md
Exploit
Third Party Advisory
https://gstreamer.freedesktop.org/security/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gstreamer_project:gstreamer:*:*:*:*:*:*:*:*

Версия до 1.26.2 (исключая)

EPSS

Процентиль: 18%

0.00058

Низкий

5.6 Medium

CVSS3

Дефекты

CWE-476

Связанные уязвимости

CVE-2025-47808

CVSS3: 5.6

ubuntu

10 дней назад

In GStreamer through 1.26.1, the subparse plugin's tmplayer_parse_line function may dereference a NULL pointer while parsing a subtitle file, leading to a crash.

CVE-2025-47808

CVSS3: 5.6

redhat

11 дней назад

In GStreamer through 1.26.1, the subparse plugin's tmplayer_parse_line function may dereference a NULL pointer while parsing a subtitle file, leading to a crash.

CVE-2025-47808

CVSS3: 5.6

debian

10 дней назад

In GStreamer through 1.26.1, the subparse plugin's tmplayer_parse_line ...

GHSA-qpmm-4hhq-c2qc

CVSS3: 5.6

github

10 дней назад

In GStreamer through 1.26.1, the subparse plugin's tmplayer_parse_line function may dereference a NULL pointer while parsing a subtitle file, leading to a crash.

SUSE-SU-2025:02304-1

suse-cvrf

около 1 месяца назад

Security update for gstreamer-plugins-base

EPSS

Процентиль: 18%

0.00058

Низкий

5.6 Medium

CVSS3

Дефекты

CWE-476