NULL Pointer Dereference Vulnerability in GStreamer Subparse Plugin
CVE-2025-47808

5.6MEDIUM

Key Information:

Vendor

GStreamer

Status
GStreamer
Vendor
CVE Published:
7 August 2025

What is CVE-2025-47808?

In GStreamer versions prior to 1.26.1, a vulnerability exists in the subparse plugin's tmplayer_parse_line function that can lead to a crash due to a NULL pointer dereference when handling subtitle files. This flaw may impact system stability and requires immediate attention to ensure system integrity.

References

https://gstreamer.freedesktop.org/security/
https://github.com/atredispartners/advisories/blob/master...

CVSS V3.1

Score:
5.6
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.