1.7 KiB
1.7 KiB
Security Advisory 2025-0004 (CVE-2025-47219)
| Summary | Out-of-bounds read in MOV/MP4 demuxer |
| Date | 2025-05-29 23:30 |
| Affected Versions | GStreamer gst-plugins-good < 1.26.2 |
| IDs | GStreamer-SA-2025-0004 CVE-2025-47219 |
Details
An Out-of-bounds read in the MOV/MP4 demuxer that can cause crashes or potentially information leaks for certain input files.
Impact
It is possible for a malicious third party to trigger an Out-of-bounds read that can result in a crash of the application or potentially information leaks.
Solution
The gst-plugins-good 1.26.2 release addresses the issue.
People using older versions of GStreamer should either upgrade or apply the minimal patch and recompile.
Note that the minimal patch is not included in the 1.26.2 release in that form since this issue was solved independently in a different way as part of a bigger refactoring that solved this and many other issues.