Buffer Overflow Vulnerability in GStreamer Subparse Plugin

CVE-2025-47806

What is CVE-2025-47806?

In GStreamer, an exploitable buffer overflow vulnerability has been identified in the subparse plugin, specifically within the parse_subrip_time function. This issue allows for data to be written beyond the bounds of a stack buffer, potentially causing application crashes. Users of GStreamer version 1.26.1 and earlier should take immediate precautions to mitigate this risk, as it may open the door to more severe exploitation. For comprehensive security measures and updates, users can refer to the official GStreamer security page.

References