CVE-2025-47183

Summary

In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_tree function may read past the end of a heap buffer while parsing an MP4 file, leading to information disclosure.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

Additional References

• https://github.com/atredispartners/advisories/blob/master/2025/ATREDIS-2025-0003.md

References

• https://gstreamer.freedesktop.org/security/
• https://github.com/atredispartners/advisories/blob/master/2025/ATREDIS-2025-0003.md

• ←Previous
• Next→