VDB
DEBIAN-CVE-2025-47183
DEBIAN-CVE-2025-47183
PUBLISHED
CVSS 6.599999904632568 MEDIUM
In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_tree function may read past the end of a heap buffer while parsing an MP4 file, leading to information disclosure.
Risk Scores
CVSS 3.1
6.599999904632568
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:12 | gst-plugins-good1.0 | 1.24.9-1, 1.27.50-1, 1.27.50-2 |
| Debian:14 | gst-plugins-good1.0 | 0, 0 |
| Debian:13 | gst-plugins-good1.0 | 0, 0 |
| Debian | gst-plugins-good1.0 | |
| Debian:11 | gst-plugins-good1.0 | 1.18.4-2+deb11u1, 1.18.4-2+deb11u2, 1.18.4-2+deb11u3 |
Timeline
- Aug 7, 2025 CVE Published
- Apr 28, 2026 CVE Updated