CVE-2025-47806
In GStreamer through 1.26.1, the subparse plugin's parse_subrip_time function may write data past...
In GStreamer through 1.26.1, the subparse plugin's parse_subrip_time function may write data past the bounds of a stack buffer, leading to a crash.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
In GStreamer through 1.26.1, the subparse plugin's parse_subrip_time function may write data past the bounds of a stack buffer, leading to a crash.
- Record
CVE-2025-47806- CVSS 3.1
- 5.6 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L - Weakness
- CWE-121
- Updated
- 2026-11-02
EUVDEUVD-2025-23942
In GStreamer through 1.26.1, the subparse plugin's parse_subrip_time function may write data past the bounds of a stack buffer, leading to a crash.
- Record
EUVD-2025-23942- CVSS 3.1
- 5.6 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-2g8j-23q2-f55c
In GStreamer through 1.26.1, the subparse plugin's parse_subrip_time function may write data past...
In GStreamer through 1.26.1, the subparse plugin's parse_subrip_time function may write data past the bounds of a stack buffer, leading to a crash.
- Record
GHSA-2g8j-23q2-f55c- CVSS 3.1
- 5.6 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L - Weakness
- CWE-121
- Updated
- 2026-11-02
NVD
In GStreamer through 1.26.1, the subparse plugin's parse_subrip_time function may write data past the bounds of a stack buffer, leading to a crash.
- Record
CVE-2025-47806- CVSS 3.1
- 5.6 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L - Weakness
- CWE-121
- Updated
- 2026-11-02
OSVALPINE-CVE-2025-47806
In GStreamer through 1.26.1, the subparse plugin's parse_subrip_time function may write data past the bounds of a stack buffer, leading to a crash.
- Record
ALPINE-CVE-2025-47806- CVSS 3.1
- 5.6 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVBELL-CVE-2025-47806
- Record
BELL-CVE-2025-47806- CVSS 3.1
- 5.6 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
Show 16 moreShow less
OSV
In GStreamer through 1.26.1, the subparse plugin's parse_subrip_time function may write data past the bounds of a stack buffer, leading to a crash.
- Record
CVE-2025-47806- CVSS 3.1
- 5.6 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVDEBIAN-CVE-2025-47806
In GStreamer through 1.26.1, the subparse plugin's parse_subrip_time function may write data past the bounds of a stack buffer, leading to a crash.
- Record
DEBIAN-CVE-2025-47806- CVSS 3.1
- 5.6 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVOESA-2025-1616
gstreamer1-plugins-base security update
GStreamer is a graphics library for built-in media processing components. BasePlug-ins is a the collections used to maintain the GStreamer plugin.
Security Fix(es):
(CVE-2025-47806)
(CVE-2025-47807)
(CVE-2025-47808)
- Record
OESA-2025-1616- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2025-47806
In GStreamer through 1.26.1, the subparse plugin's parse_subrip_time function may write data past the bounds of a stack buffer, leading to a crash.
- Record
UBUNTU-CVE-2025-47806- CVSS 3.1
- 5.6 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVAZL-66180 No score
CVE-2025-47806 affecting package gstreamer1-plugins-base 1.20.0-3
In GStreamer through 1.26.1, the subparse plugin's parse_subrip_time function may write data past the bounds of a stack buffer, leading to a crash.
- Record
AZL-66180- Updated
- 2026-11-02
OSVAZL-66186 No score
CVE-2025-47806 affecting package gstreamer1-plugins-base 1.20.0-3
In GStreamer through 1.26.1, the subparse plugin's parse_subrip_time function may write data past the bounds of a stack buffer, leading to a crash.
- Record
AZL-66186- Updated
- 2026-11-05
OSVSUSE-SU-2025:02020-1 No score
Security update for gstreamer-plugins-base
This update for gstreamer-plugins-base fixes the following issues:
- CVE-2024-47538: Fixed stack-buffer overflow in vorbis_handle_identification_packet (bnc#1234415)
- CVE-2024-47600: Fixed out-of-bounds read in gst-discoverer-1.0 commandline tool (bnc#1234453)
- CVE-2024-47615: Fixed out-of-bounds write in Ogg demuxer (bnc#1234456)
- CVE-2024-47542: Fixed ID3v2 parser out-of-bounds read and NULL-pointer dereference (bnc#1234460)
- CVE-2024-47607: Fixed stack buffer-overflow in Opus decoder (bnc#1234455)
- CVE-2024-47835: Fixed NULL-pointer dereference in LRC subtitle parser (bnc#1234450)
- CVE-2024-47541: Fixed out-of-bounds write in SSA subtitle parser (bnc#1234459)
- CVE-2025-47808: Fixed NULL-pointer dereference in TMPlayer subtitle parser (boo#1244404)
- CVE-2025-47807: Fixed NULL-pointer dereference in SubRip subtitle parser (boo#1244403)
- CVE-2025-47806: Fixed Stack buffer overflow in SubRip subtitle parser (boo#1244407)
- Record
SUSE-SU-2025:02020-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:02302-1 No score
Security update for gstreamer-plugins-base
This update for gstreamer-plugins-base fixes the following issues:
- CVE-2025-47808: Fixed NULL-pointer dereference in TMPlayer subtitle parser (bsc#1244404).
- CVE-2025-47807: Fixed NULL-pointer dereference in SubRip subtitle parser (bsc#1244403).
- CVE-2025-47806: Fixed stack buffer overflow in SubRip subtitle parser (bsc#1244407).
- Record
SUSE-SU-2025:02302-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:02304-1 No score
Security update for gstreamer-plugins-base
This update for gstreamer-plugins-base fixes the following issues:
- CVE-2025-47808: Fixed NULL-pointer dereference in TMPlayer subtitle parser (bsc#1244404).
- CVE-2025-47807: Fixed NULL-pointer dereference in SubRip subtitle parser (bsc#1244403).
- CVE-2025-47806: Fixed stack buffer overflow in SubRip subtitle parser (bsc#1244407).
- Record
SUSE-SU-2025:02304-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:02472-1 No score
Security update for gstreamer-plugins-base
This update for gstreamer-plugins-base fixes the following issues:
- CVE-2025-47808: Fixed NULL-pointer dereference in TMPlayer subtitle parser (bsc#1244404).
- CVE-2025-47807: Fixed NULL-pointer dereference in SubRip subtitle parser (bsc#1244403).
- CVE-2025-47806: Fixed stack buffer overflow in SubRip subtitle parser (bsc#1244407).
- Record
SUSE-SU-2025:02472-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:02796-1 No score
Security update for gstreamer-plugins-base
This update for gstreamer-plugins-base fixes the following issues:
- CVE-2025-47808: Fixed NULL-pointer dereference in TMPlayer subtitle parser (bsc#1244404).
- CVE-2025-47807: Fixed NULL-pointer dereference in SubRip subtitle parser (bsc#1244403).
- CVE-2025-47806: Fixed stack buffer overflow in SubRip subtitle parser (bsc#1244407).
- Record
SUSE-SU-2025:02796-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:02919-1 No score
Security update for gstreamer-0_10-plugins-base
This update for gstreamer-0_10-plugins-base fixes the following issues:
- CVE-2025-47808: Fixed stack buffer overflow in SubRip subtitle parser (bsc#1244404)
- CVE-2025-47807: Fixed NULL-pointer dereference in TMPlayer subtitle parser (bsc#1244403)
- CVE-2025-47806: Fixed NULL-pointer dereference in SubRip subtitle parser (bsc#1244407)
- Record
SUSE-SU-2025:02919-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:20507-1 No score
Security update for gstreamer-plugins-base
This update for gstreamer-plugins-base fixes the following issues:
- CVE-2025-47807: Fixed NULL-pointer dereference in SubRip subtitle parser (bsc#1244403)
- CVE-2025-47808: Fixed NULL-pointer dereference in TMPlayer subtitle parser (bsc#1244404)
- CVE-2025-47806: Fixed Stack buffer overflow in SubRip subtitle parser (bsc#1244407)
- Record
SUSE-SU-2025:20507-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:20751-1 No score
Security update for gstreamer-plugins-base
This update for gstreamer-plugins-base fixes the following issues:
- CVE-2025-47806: Fixed stack buffer overflow in SubRip subtitle parser (bsc#1244407).
- CVE-2025-47807: Fixed NULL-pointer dereference in SubRip subtitle parser (bsc#1244403).
- CVE-2025-47808: Fixed NULL-pointer dereference in TMPlayer subtitle parser (bsc#1244404).
- Record
SUSE-SU-2025:20751-1- Updated
- 2026-11-02
OSVUSN-7716-1 No score
gst-plugins-base1.0 vulnerabilities
Shaun Mirani discovered that GStreamer Base Plugins incorrectly handled certain malformed media files. An attacker could use these issues to cause GStreamer Base Plugins to crash, resulting in a denial of service, or possibly execute arbitrary code.
- Record
USN-7716-1- Updated
- 2026-11-02
OSVUSN-7827-1 No score
gst-plugins-base1.0 vulnerabilities
Shaun Mirani discovered that GStreamer Base Plugins did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service.
- Record
USN-7827-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gst-plugins-baseAlpine:v3.22 |
before 1.26.2-r0 | 1.26.2-r0 |
gst-plugins-baseAlpine:v3.23 |
before 1.26.2-r0 | 1.26.2-r0 |
gst-plugins-baseAlpine:v3.24 |
before 1.26.2-r0 | 1.26.2-r0 |
gstreamer1-plugins-baseAzure Linux:2 |
through 1.20.0-3 | None known |
gstreamer1-plugins-baseAzure Linux:3 |
through 1.20.0-3 | None known |
gst-plugins-baseAlpaquita:23 |
1.20.4-r0 up to 1.20.7-r2 | 1.20.7-r2 |
gst-plugins-baseAlpaquita:25 |
1.26.1-r0 up to 1.26.3-r0 | 1.26.3-r0 |
gst-plugins-baseAlpaquita:stream |
1.22.1-r0 up to 1.26.2-r0 | 1.26.2-r0 |
gst-plugins-base1.0Debian:12 |
before 1.22.0-3+deb12u5, plus listed versions 1.22.0-31.22.0-3+deb12u11.22.0-3+deb12u21.22.0-3+deb12u31.22.0-3+deb12u4 |
1.22.0-3+deb12u5 |
gst-plugins-base1.0Debian:13 |
before 1.26.2-1 | 1.26.2-1 |
Show 35 moreShow less
| Package | Affected | Fixed |
|---|---|---|
gst-plugins-base1.0Debian:14 |
before 1.26.2-1 | 1.26.2-1 |
gst-plugins-base1.0Debian:11 From an advisory covering 3 CVEs |
before 1.18.4-2+deb11u4, plus listed versions 1.18.4-21.18.4-2+deb11u11.18.4-2+deb11u21.18.4-2+deb11u3 |
1.18.4-2+deb11u4 |
gstreamer1-plugins-baseopenEuler:22.03-LTS-SP3 From an advisory covering 3 CVEs |
before 1.18.4-9.oe2203sp3 | 1.18.4-9.oe2203sp3 |
gstreamer1-plugins-baseopenEuler:22.03-LTS-SP4 From an advisory covering 3 CVEs |
before 1.18.4-9.oe2203sp4 | 1.18.4-9.oe2203sp4 |
gstreamer1-plugins-baseopenEuler:24.03-LTS From an advisory covering 3 CVEs |
before 1.22.5-3.oe2403sp1 | 1.22.5-3.oe2403sp1 |
gstreamer1-plugins-baseopenEuler:24.03-LTS-SP1 From an advisory covering 3 CVEs |
before 1.22.5-3.oe2403sp1 | 1.22.5-3.oe2403sp1 |
gstreamer1-plugins-baseopenEuler:20.03-LTS-SP4 From an advisory covering 3 CVEs |
before 1.16.2-7.oe2003sp4 | 1.16.2-7.oe2003sp4 |
gstreamer-plugins-baseSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 10 CVEs |
before 1.16.3-150200.4.19.1 | 1.16.3-150200.4.19.1 |
gstreamer-plugins-baseSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 10 CVEs |
before 1.16.3-150200.4.19.1 | 1.16.3-150200.4.19.1 |
gstreamer-plugins-baseSUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 10 CVEs |
before 1.16.3-150200.4.19.1 | 1.16.3-150200.4.19.1 |
gstreamer-plugins-baseSUSE:Linux Enterprise Micro 5.2 From an advisory covering 10 CVEs |
before 1.16.3-150200.4.19.1 | 1.16.3-150200.4.19.1 |
gstreamer-plugins-baseSUSE:Enterprise Storage 7.1 From an advisory covering 10 CVEs |
before 1.16.3-150200.4.19.1 | 1.16.3-150200.4.19.1 |
gstreamer-plugins-baseSUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 3 CVEs |
before 1.24.0-150600.3.11.1 | 1.24.0-150600.3.11.1 |
gstreamer-plugins-baseSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 3 CVEs |
before 1.24.0-150600.3.11.1 | 1.24.0-150600.3.11.1 |
gstreamer-plugins-baseSUSE:Linux Enterprise Module for Package Hub 15 SP6 From an advisory covering 3 CVEs |
before 1.24.0-150600.3.11.1 | 1.24.0-150600.3.11.1 |
gstreamer-plugins-baseSUSE:Linux Enterprise Module for Package Hub 15 SP7 From an advisory covering 3 CVEs |
before 1.24.0-150600.3.11.1 | 1.24.0-150600.3.11.1 |
gstreamer-plugins-baseopenSUSE:Leap 15.6 From an advisory covering 3 CVEs |
before 1.24.0-150600.3.11.1 | 1.24.0-150600.3.11.1 |
gstreamer-plugins-baseSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 3 CVEs |
before 1.8.3-13.21.1 | 1.8.3-13.21.1 |
gstreamer-plugins-baseSUSE:Linux Enterprise Micro 5.3 From an advisory covering 3 CVEs |
before 1.20.1-150400.3.14.1 | 1.20.1-150400.3.14.1 |
gstreamer-plugins-baseSUSE:Linux Enterprise Micro 5.4 From an advisory covering 3 CVEs |
before 1.20.1-150400.3.14.1 | 1.20.1-150400.3.14.1 |
gstreamer-plugins-baseSUSE:Linux Enterprise Micro 5.5 From an advisory covering 3 CVEs |
before 1.22.0-150500.3.14.1 | 1.22.0-150500.3.14.1 |
gstreamer-0_10-plugins-baseSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 3 CVEs |
before 0.10.36-18.9.1 | 0.10.36-18.9.1 |
gstreamer-plugins-baseSUSE:Linux Micro 6.0 From an advisory covering 3 CVEs |
before 1.22.9-3.1 | 1.22.9-3.1 |
gstreamer-plugins-baseSUSE:Linux Micro 6.1 From an advisory covering 3 CVEs |
before 1.24.7-slfo.1.1_3.1 | 1.24.7-slfo.1.1_3.1 |
gst-plugins-base1.0Ubuntu:Pro:16.04:LTS |
before 1.8.3-1ubuntu0.3+esm3, plus listed versions 1.6.0-1ubuntu11.6.1-1ubuntu11.6.2-1ubuntu11.7.1-1ubuntu11.7.2-1ubuntu1 Show 11 moreShow less1.7.90-1ubuntu11.7.91-1ubuntu11.8.0-1ubuntu11.8.1-1ubuntu0.11.8.2-1ubuntu0.11.8.2-1ubuntu0.21.8.3-1ubuntu0.11.8.3-1ubuntu0.21.8.3-1ubuntu0.31.8.3-1ubuntu0.3+esm11.8.3-1ubuntu0.3+esm2 |
1.8.3-1ubuntu0.3+esm3 |
gst-plugins-base1.0Ubuntu:Pro:18.04:LTS |
before 1.14.5-0ubuntu1~18.04.3+esm2, plus listed versions 1.12.3-11.12.4-11.13.1-1ubuntu11.13.91-1ubuntu11.14.0-1ubuntu1 Show 8 moreShow less1.14.0-2ubuntu11.14.1-1ubuntu1~ubuntu18.04.11.14.1-1ubuntu1~ubuntu18.04.21.14.4-1ubuntu1.1~ubuntu18.04.11.14.5-0ubuntu1~18.04.11.14.5-0ubuntu1~18.04.21.14.5-0ubuntu1~18.04.31.14.5-0ubuntu1~18.04.3+esm1 |
1.14.5-0ubuntu1~18.04.3+esm2 |
gst-plugins-base1.0Ubuntu:Pro:20.04:LTS |
before 1.16.3-0ubuntu1.4+esm1, plus listed versions 1.16.1-11.16.2-11.16.2-21.16.2-2ubuntu31.16.2-2ubuntu4 Show 7 moreShow less1.16.2-41.16.2-4ubuntu0.11.16.3-0ubuntu11.16.3-0ubuntu1.11.16.3-0ubuntu1.21.16.3-0ubuntu1.31.16.3-0ubuntu1.4 |
1.16.3-0ubuntu1.4+esm1 |
gst-plugins-base1.0Ubuntu:22.04:LTS |
before 1.20.1-1ubuntu0.5, plus listed versions 1.18.5-11.19.90-11.20.0-11.20.0-21.20.1-11.20.1-1ubuntu0.11.20.1-1ubuntu0.21.20.1-1ubuntu0.4 |
1.20.1-1ubuntu0.5 |
gst-plugins-base1.0Ubuntu:24.04:LTS |
before 1.24.2-1ubuntu0.3, plus listed versions 1.22.6-11.22.7-11.22.8-11.22.10-11.24.1-1 Show 4 moreShow less1.24.1-1build11.24.2-11.24.2-1ubuntu0.11.24.2-1ubuntu0.2 |
1.24.2-1ubuntu0.3 |
gst-plugins-base1.0Ubuntu:25.10 |
before 1.26.2-1, plus listed versions 1.26.0-11.26.1-1 |
1.26.2-1 |
gst-plugins-base1.0Ubuntu:22.04:LTS From an advisory covering 3 CVEs |
before 1.20.1-1ubuntu0.5, plus listed versions 1.18.5-11.19.90-11.20.0-11.20.0-21.20.1-11.20.1-1ubuntu0.11.20.1-1ubuntu0.21.20.1-1ubuntu0.4 |
1.20.1-1ubuntu0.5 |
gst-plugins-base1.0Ubuntu:24.04:LTS From an advisory covering 3 CVEs |
before 1.24.2-1ubuntu0.3, plus listed versions 1.22.6-11.22.7-11.22.8-11.22.10-11.24.1-1 Show 4 moreShow less1.24.1-1build11.24.2-11.24.2-1ubuntu0.11.24.2-1ubuntu0.2 |
1.24.2-1ubuntu0.3 |
gst-plugins-base1.0Ubuntu:Pro:16.04:LTS From an advisory covering 3 CVEs |
before 1.8.3-1ubuntu0.3+esm3, plus listed versions 1.6.0-1ubuntu11.6.1-1ubuntu11.6.2-1ubuntu11.7.1-1ubuntu11.7.2-1ubuntu1 Show 11 moreShow less1.7.90-1ubuntu11.7.91-1ubuntu11.8.0-1ubuntu11.8.1-1ubuntu0.11.8.2-1ubuntu0.11.8.2-1ubuntu0.21.8.3-1ubuntu0.11.8.3-1ubuntu0.21.8.3-1ubuntu0.31.8.3-1ubuntu0.3+esm11.8.3-1ubuntu0.3+esm2 |
1.8.3-1ubuntu0.3+esm3 |
gst-plugins-base1.0Ubuntu:Pro:18.04:LTS From an advisory covering 3 CVEs |
before 1.14.5-0ubuntu1~18.04.3+esm2, plus listed versions 1.12.3-11.12.4-11.13.1-1ubuntu11.13.91-1ubuntu11.14.0-1ubuntu1 Show 8 moreShow less1.14.0-2ubuntu11.14.1-1ubuntu1~ubuntu18.04.11.14.1-1ubuntu1~ubuntu18.04.21.14.4-1ubuntu1.1~ubuntu18.04.11.14.5-0ubuntu1~18.04.11.14.5-0ubuntu1~18.04.21.14.5-0ubuntu1~18.04.31.14.5-0ubuntu1~18.04.3+esm1 |
1.14.5-0ubuntu1~18.04.3+esm2 |
gst-plugins-base1.0Ubuntu:Pro:20.04:LTS From an advisory covering 3 CVEs |
before 1.16.3-0ubuntu1.4+esm1, plus listed versions 1.16.1-11.16.2-11.16.2-21.16.2-2ubuntu31.16.2-2ubuntu4 Show 7 moreShow less1.16.2-41.16.2-4ubuntu0.11.16.3-0ubuntu11.16.3-0ubuntu1.11.16.3-0ubuntu1.21.16.3-0ubuntu1.31.16.3-0ubuntu1.4 |
1.16.3-0ubuntu1.4+esm1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-47806 is a medium vulnerability (CVSS 5.6) in Gstreamer, published June 3, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.31%, the 23rd percentile. Fixed in gst-plugins-base 1.26.2-r0.
References
gstreamer.freedesktop.org/security
github.com/atredispartners/advisories/blob/master/2025/ATREDIS-2025-0003.md
nvd.nist.gov/vuln/detail/CVE-2025-47806
security.alpinelinux.org/vuln/CVE-2025-47806
docs.bell-sw.com/security/cves/CVE-2025-47806
Show 39 moreShow less
security-tracker.debian.org/tracker/CVE-2025-47806
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2025-1616
suse.com/support/update/announcement/2025/suse-su-202502020-1
bugzilla.suse.com/1234415
ubuntu.com/security/CVE-2025-47806
cve.org/CVERecord?id=CVE-2025-47806