In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read past the end of a heap buffer while parsing an MP4 file, possibly leading to information disclosure.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://github.com/atredispartners/advisories/blob/master/2025/ATREDIS-2025-0003.md | Exploit Third Party Advisory |
| https://gstreamer.freedesktop.org/security/ | Vendor Advisory |
Configurations
History
12 Aug 2025, 16:40
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:gstreamer_project:gstreamer:*:*:*:*:*:*:*:* | |
| References | () https://github.com/atredispartners/advisories/blob/master/2025/ATREDIS-2025-0003.md - Exploit, Third Party Advisory | |
| References | () https://gstreamer.freedesktop.org/security/ - Vendor Advisory | |
| First Time |
Gstreamer Project gstreamer
Gstreamer Project |
07 Aug 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-08-07 20:15
Updated : 2025-08-12 16:40
NVD link : CVE-2025-47219
Mitre link : CVE-2025-47219
JSON object : View
Products Affected
gstreamer_project
- gstreamer
CWE
No CWE.