1.3 KiB

Security Advisory 2025-0005 (CVE-2025-47183)

Summary Out-of-bounds read in MOV/MP4 demuxer
Date 2025-05-29 23:30
Affected Versions GStreamer gst-plugins-good < 1.26.2
IDs GStreamer-SA-2025-0005
CVE-2025-47183

Details

An Out-of-bounds read in the MOV/MP4 demuxer that can cause crashes or potentially information leaks for certain input files.

Impact

It is possible for a malicious third party to trigger an Out-of-bounds read that can result in a crash of the application or potentially information leaks.

Solution

The gst-plugins-good 1.26.2 release addresses the issue. People using older branches of GStreamer should apply the patch and recompile.

References

The GStreamer project

CVE Database Entries

GStreamer releases

1.26 (current stable)

Patches