{"id":"CVE-2025-47808","aliases":["ALPINE-CVE-2025-47808","AZL-66177","AZL-66192","BELL-CVE-2025-47808","DEBIAN-CVE-2025-47808","DLA-4371-1","EUVD-2025-23944","GHSA-qpmm-4hhq-c2qc","OESA-2025-1616","SUSE-SU-2025:02020-1","SUSE-SU-2025:02302-1","SUSE-SU-2025:02304-1","SUSE-SU-2025:02472-1","SUSE-SU-2025:02796-1","SUSE-SU-2025:02919-1","SUSE-SU-2025:20507-1","SUSE-SU-2025:20751-1","UBUNTU-CVE-2025-47808","USN-7716-1","USN-7827-1"],"status":"published","title":"In GStreamer through 1.26.1, the subparse plugin's tmplayer_parse_line function may dereference a...","description":"In GStreamer through 1.26.1, the subparse plugin's tmplayer_parse_line function may dereference a NULL pointer while parsing a subtitle file, leading to a crash.","severity":{"version":"3.1","score":5.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.00545,"percentile":0.46052,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2025-06-03T08:57:27.833248Z","modified":"2026-11-05T05:36:30Z","fixes":[{"ecosystem":"Alpine:v3.22","package":"gst-plugins-base","fixed_in":["1.26.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"gst-plugins-base","fixed_in":["1.26.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"gst-plugins-base","fixed_in":["1.26.2-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"gst-plugins-base","fixed_in":["1.20.7-r2"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"gst-plugins-base","fixed_in":["1.26.3-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"gst-plugins-base","fixed_in":["1.26.2-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"gst-plugins-base1.0","fixed_in":["1.22.0-3+deb12u5"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"gst-plugins-base1.0","fixed_in":["1.26.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gst-plugins-base1.0","fixed_in":["1.26.2-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gst-plugins-base1.0","fixed_in":["1.8.3-1ubuntu0.3+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gst-plugins-base1.0","fixed_in":["1.14.5-0ubuntu1~18.04.3+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gst-plugins-base1.0","fixed_in":["1.16.3-0ubuntu1.4+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"gst-plugins-base1.0","fixed_in":["1.20.1-1ubuntu0.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"gst-plugins-base1.0","fixed_in":["1.24.2-1ubuntu0.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"gst-plugins-base1.0","fixed_in":["1.26.2-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.22","package":"gst-plugins-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"gst-plugins-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"gst-plugins-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.2-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"gstreamer1-plugins-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.20.0-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"gstreamer1-plugins-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.20.0-3"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"gst-plugins-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.20.4-r0"},{"fixed":"1.20.7-r2"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"gst-plugins-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.26.1-r0"},{"fixed":"1.26.3-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"gst-plugins-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.22.1-r0"},{"fixed":"1.26.2-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"gst-plugins-base1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.0-3+deb12u5"}]}],"versions":["1.22.0-3","1.22.0-3+deb12u1","1.22.0-3+deb12u2","1.22.0-3+deb12u3","1.22.0-3+deb12u4"]},{"source":"osv","ecosystem":"Debian:13","package":"gst-plugins-base1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"gst-plugins-base1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.2-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"gst-plugins-base1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.4-2+deb11u4"}]}],"versions":["1.18.4-2","1.18.4-2+deb11u1","1.18.4-2+deb11u2","1.18.4-2+deb11u3"],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"gstreamer1-plugins-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.4-9.oe2203sp3"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"gstreamer1-plugins-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.4-9.oe2203sp4"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"gstreamer1-plugins-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.5-3.oe2403sp1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"gstreamer1-plugins-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.5-3.oe2403sp1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"gstreamer1-plugins-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.2-7.oe2003sp4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"gstreamer-plugins-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-150200.4.19.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"gstreamer-plugins-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-150200.4.19.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"gstreamer-plugins-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-150200.4.19.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"gstreamer-plugins-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-150200.4.19.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"gstreamer-plugins-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-150200.4.19.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"gstreamer-plugins-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-150600.3.11.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"gstreamer-plugins-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-150600.3.11.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"gstreamer-plugins-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-150600.3.11.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"gstreamer-plugins-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-150600.3.11.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"gstreamer-plugins-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-150600.3.11.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"gstreamer-plugins-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3-13.21.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"gstreamer-plugins-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-150400.3.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"gstreamer-plugins-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-150400.3.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"gstreamer-plugins-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.0-150500.3.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"gstreamer-0_10-plugins-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.36-18.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"gstreamer-plugins-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.9-3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"gstreamer-plugins-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.7-slfo.1.1_3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gst-plugins-base1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3-1ubuntu0.3+esm3"}]}],"versions":["1.6.0-1ubuntu1","1.6.1-1ubuntu1","1.6.2-1ubuntu1","1.7.1-1ubuntu1","1.7.2-1ubuntu1","1.7.90-1ubuntu1","1.7.91-1ubuntu1","1.8.0-1ubuntu1","1.8.1-1ubuntu0.1","1.8.2-1ubuntu0.1","1.8.2-1ubuntu0.2","1.8.3-1ubuntu0.1","1.8.3-1ubuntu0.2","1.8.3-1ubuntu0.3","1.8.3-1ubuntu0.3+esm1","1.8.3-1ubuntu0.3+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gst-plugins-base1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.5-0ubuntu1~18.04.3+esm2"}]}],"versions":["1.12.3-1","1.12.4-1","1.13.1-1ubuntu1","1.13.91-1ubuntu1","1.14.0-1ubuntu1","1.14.0-2ubuntu1","1.14.1-1ubuntu1~ubuntu18.04.1","1.14.1-1ubuntu1~ubuntu18.04.2","1.14.4-1ubuntu1.1~ubuntu18.04.1","1.14.5-0ubuntu1~18.04.1","1.14.5-0ubuntu1~18.04.2","1.14.5-0ubuntu1~18.04.3","1.14.5-0ubuntu1~18.04.3+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gst-plugins-base1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-0ubuntu1.4+esm1"}]}],"versions":["1.16.1-1","1.16.2-1","1.16.2-2","1.16.2-2ubuntu3","1.16.2-2ubuntu4","1.16.2-4","1.16.2-4ubuntu0.1","1.16.3-0ubuntu1","1.16.3-0ubuntu1.1","1.16.3-0ubuntu1.2","1.16.3-0ubuntu1.3","1.16.3-0ubuntu1.4"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"gst-plugins-base1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-1ubuntu0.5"}]}],"versions":["1.18.5-1","1.19.90-1","1.20.0-1","1.20.0-2","1.20.1-1","1.20.1-1ubuntu0.1","1.20.1-1ubuntu0.2","1.20.1-1ubuntu0.4"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"gst-plugins-base1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.2-1ubuntu0.3"}]}],"versions":["1.22.6-1","1.22.7-1","1.22.8-1","1.22.10-1","1.24.1-1","1.24.1-1build1","1.24.2-1","1.24.2-1ubuntu0.1","1.24.2-1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"gst-plugins-base1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.2-1"}]}],"versions":["1.26.0-1","1.26.1-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"gst-plugins-base1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-1ubuntu0.5"}]}],"versions":["1.18.5-1","1.19.90-1","1.20.0-1","1.20.0-2","1.20.1-1","1.20.1-1ubuntu0.1","1.20.1-1ubuntu0.2","1.20.1-1ubuntu0.4"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"gst-plugins-base1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.2-1ubuntu0.3"}]}],"versions":["1.22.6-1","1.22.7-1","1.22.8-1","1.22.10-1","1.24.1-1","1.24.1-1build1","1.24.2-1","1.24.2-1ubuntu0.1","1.24.2-1ubuntu0.2"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gst-plugins-base1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3-1ubuntu0.3+esm3"}]}],"versions":["1.6.0-1ubuntu1","1.6.1-1ubuntu1","1.6.2-1ubuntu1","1.7.1-1ubuntu1","1.7.2-1ubuntu1","1.7.90-1ubuntu1","1.7.91-1ubuntu1","1.8.0-1ubuntu1","1.8.1-1ubuntu0.1","1.8.2-1ubuntu0.1","1.8.2-1ubuntu0.2","1.8.3-1ubuntu0.1","1.8.3-1ubuntu0.2","1.8.3-1ubuntu0.3","1.8.3-1ubuntu0.3+esm1","1.8.3-1ubuntu0.3+esm2"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gst-plugins-base1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.5-0ubuntu1~18.04.3+esm2"}]}],"versions":["1.12.3-1","1.12.4-1","1.13.1-1ubuntu1","1.13.91-1ubuntu1","1.14.0-1ubuntu1","1.14.0-2ubuntu1","1.14.1-1ubuntu1~ubuntu18.04.1","1.14.1-1ubuntu1~ubuntu18.04.2","1.14.4-1ubuntu1.1~ubuntu18.04.1","1.14.5-0ubuntu1~18.04.1","1.14.5-0ubuntu1~18.04.2","1.14.5-0ubuntu1~18.04.3","1.14.5-0ubuntu1~18.04.3+esm1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gst-plugins-base1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-0ubuntu1.4+esm1"}]}],"versions":["1.16.1-1","1.16.2-1","1.16.2-2","1.16.2-2ubuntu3","1.16.2-2ubuntu4","1.16.2-4","1.16.2-4ubuntu0.1","1.16.3-0ubuntu1","1.16.3-0ubuntu1.1","1.16.3-0ubuntu1.2","1.16.3-0ubuntu1.3","1.16.3-0ubuntu1.4"],"bundled":3}],"products":[{"vendor":"gstreamer","product":"gstreamer"}],"references":[{"url":"https://gstreamer.freedesktop.org/security/","tags":["Vendor Advisory","web","report"]},{"url":"https://github.com/atredispartners/advisories/blob/master/2025/ATREDIS-2025-0003.md","tags":["Exploit","Third Party Advisory","advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-47808","tags":["web","advisory"]},{"url":"https://gstreamer.freedesktop.org/security"},{"url":"https://github.com/advisories/GHSA-qpmm-4hhq-c2qc"},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-47808","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-47808","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/47xxx/CVE-2025-47808.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-47808","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1616","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-47806","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-47807","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502020-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1234415","tags":["report"]},{"url":"https://bugzilla.suse.com/1234450","tags":["report"]},{"url":"https://bugzilla.suse.com/1234453","tags":["report"]},{"url":"https://bugzilla.suse.com/1234455","tags":["report"]},{"url":"https://bugzilla.suse.com/1234456","tags":["report"]},{"url":"https://bugzilla.suse.com/1234459","tags":["report"]},{"url":"https://bugzilla.suse.com/1234460","tags":["report"]},{"url":"https://bugzilla.suse.com/1244403","tags":["report"]},{"url":"https://bugzilla.suse.com/1244404","tags":["report"]},{"url":"https://bugzilla.suse.com/1244407","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47607","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47808","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502302-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502304-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502472-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502796-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502919-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520507-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520751-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-47808","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-47808","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7716-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7827-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-47806","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-47807","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2025-47808","description":"In GStreamer through 1.26.1, the subparse plugin's tmplayer_parse_line function may dereference a NULL pointer while parsing a subtitle file, leading to a crash.","status":"published","published":"2025-08-07T00:00:00Z","modified":"2025-08-07T19:50:58.524Z","cvss":[{"version":"3.1","score":5.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"adp"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:32:26.320248Z"}],"euvd":[{"id":"EUVD-2025-23944","description":"In GStreamer through 1.26.1, the subparse plugin's tmplayer_parse_line function may dereference a NULL pointer while parsing a subtitle file, leading to a crash.","status":"published","published":"2025-08-07T00:00:00Z","modified":"2025-08-07T19:50:58Z","cvss":[{"version":"3.1","score":5.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T20:32:00.279926Z"}],"ghsa":[{"id":"GHSA-qpmm-4hhq-c2qc","title":"In GStreamer through 1.26.1, the subparse plugin's tmplayer_parse_line function may dereference a...","description":"In GStreamer through 1.26.1, the subparse plugin's tmplayer_parse_line function may dereference a NULL pointer while parsing a subtitle file, leading to a crash.","status":"published","published":"2025-08-07T21:31:08Z","modified":"2025-08-07T21:31:15Z","cvss":[{"version":"3.1","score":5.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T15:03:12.931908Z"}],"nvd":[{"id":"CVE-2025-47808","description":"In GStreamer through 1.26.1, the subparse plugin's tmplayer_parse_line function may dereference a NULL pointer while parsing a subtitle file, leading to a crash.","status":"published","published":"2025-08-07T20:15:27.94Z","modified":"2026-06-17T09:28:42.783Z","cvss":[{"version":"3.1","score":5.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:11:22.319351Z"}],"osv":[{"id":"ALPINE-CVE-2025-47808","description":"In GStreamer through 1.26.1, the subparse plugin's tmplayer_parse_line function may dereference a NULL pointer while parsing a subtitle file, leading to a crash.","status":"published","published":"2025-08-07T20:15:27.94Z","modified":"2026-08-27T22:18:02.913429018Z","cvss":[{"version":"3.1","score":5.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:27:50.269992Z"},{"id":"BELL-CVE-2025-47808","status":"published","published":"2025-06-03T08:57:27.833248Z","modified":"2026-01-26T09:40:28.46377Z","cvss":[{"version":"3.1","score":5.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:28:22.495824Z"},{"id":"CVE-2025-47808","description":"In GStreamer through 1.26.1, the subparse plugin's tmplayer_parse_line function may dereference a NULL pointer while parsing a subtitle file, leading to a crash.","status":"published","published":"2025-08-07T00:00:00Z","modified":"2026-10-28T02:30:42.866041364Z","cvss":[{"version":"3.1","score":5.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:44:49.707645Z"},{"id":"DEBIAN-CVE-2025-47808","description":"In GStreamer through 1.26.1, the subparse plugin's tmplayer_parse_line function may dereference a NULL pointer while parsing a subtitle file, leading to a crash.","status":"published","published":"2025-08-07T20:15:27.94Z","modified":"2026-09-01T20:05:53.046648602Z","cvss":[{"version":"3.1","score":5.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:45:47.378563Z"},{"id":"OESA-2025-1616","title":"gstreamer1-plugins-base security update","description":"GStreamer is a graphics library for built-in media processing components. BasePlug-ins is a the collections used to maintain the GStreamer plugin.\r\n\r\nSecurity Fix(es):\n\n(CVE-2025-47806)\n\n(CVE-2025-47807)\n\n(CVE-2025-47808)","status":"published","published":"2025-06-13T11:08:42Z","modified":"2026-08-18T01:18:51.489912848Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"UBUNTU-CVE-2025-47808","description":"In GStreamer through 1.26.1, the subparse plugin's tmplayer_parse_line function may dereference a NULL pointer while parsing a subtitle file, leading to a crash.","status":"published","published":"2025-08-07T20:15:00Z","modified":"2026-04-22T16:03:24.065338Z","cvss":[{"version":"3.1","score":5.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T16:55:50.31802Z"},{"id":"AZL-66177","title":"CVE-2025-47808 affecting package gstreamer1-plugins-base 1.20.0-3","description":"In GStreamer through 1.26.1, the subparse plugin's tmplayer_parse_line function may dereference a NULL pointer while parsing a subtitle file, leading to a crash.","status":"published","published":"2025-08-07T20:15:27Z","modified":"2026-04-21T04:37:48.171386Z","updated_at":"2026-11-02T15:28:08.354547Z"},{"id":"AZL-66192","title":"CVE-2025-47808 affecting package gstreamer1-plugins-base 1.20.0-3","description":"In GStreamer through 1.26.1, the subparse plugin's tmplayer_parse_line function may dereference a NULL pointer while parsing a subtitle file, leading to a crash.","status":"published","published":"2025-08-07T20:15:27Z","modified":"2026-11-05T05:36:30Z","updated_at":"2026-11-05T16:41:23.841127Z"},{"id":"DLA-4371-1","title":"gst-plugins-base1.0 - security update","status":"published","published":"2025-11-14T00:00:00Z","modified":"2025-11-14T18:19:08.622519Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"SUSE-SU-2025:02020-1","title":"Security update for gstreamer-plugins-base","description":"This update for gstreamer-plugins-base fixes the following issues:\n\n- CVE-2024-47538: Fixed stack-buffer overflow in vorbis_handle_identification_packet (bnc#1234415)\n- CVE-2024-47600: Fixed out-of-bounds read in gst-discoverer-1.0 commandline tool (bnc#1234453)\n- CVE-2024-47615: Fixed out-of-bounds write in Ogg demuxer (bnc#1234456)\n- CVE-2024-47542: Fixed ID3v2 parser out-of-bounds read and NULL-pointer dereference (bnc#1234460)\n- CVE-2024-47607: Fixed stack buffer-overflow in Opus decoder (bnc#1234455)\n- CVE-2024-47835: Fixed NULL-pointer dereference in LRC subtitle parser (bnc#1234450)\n- CVE-2024-47541: Fixed out-of-bounds write in SSA subtitle parser (bnc#1234459)\n- CVE-2025-47808: Fixed NULL-pointer dereference in TMPlayer subtitle parser (boo#1244404)\n- CVE-2025-47807: Fixed NULL-pointer dereference in SubRip subtitle parser (boo#1244403)\n- CVE-2025-47806: Fixed Stack buffer overflow in SubRip subtitle parser (boo#1244407)\n","status":"published","published":"2025-06-19T08:35:03Z","modified":"2026-03-23T04:46:25.513506Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02302-1","title":"Security update for gstreamer-plugins-base","description":"This update for gstreamer-plugins-base fixes the following issues:\n\n- CVE-2025-47808: Fixed NULL-pointer dereference in TMPlayer subtitle parser (bsc#1244404).\n- CVE-2025-47807: Fixed NULL-pointer dereference in SubRip subtitle parser (bsc#1244403).\n- CVE-2025-47806: Fixed stack buffer overflow in SubRip subtitle parser (bsc#1244407).\n","status":"published","published":"2025-07-14T10:50:22Z","modified":"2026-03-23T04:46:30.270132Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02304-1","title":"Security update for gstreamer-plugins-base","description":"This update for gstreamer-plugins-base fixes the following issues:\n\n- CVE-2025-47808: Fixed NULL-pointer dereference in TMPlayer subtitle parser (bsc#1244404).\n- CVE-2025-47807: Fixed NULL-pointer dereference in SubRip subtitle parser (bsc#1244403).\n- CVE-2025-47806: Fixed stack buffer overflow in SubRip subtitle parser (bsc#1244407).\n","status":"published","published":"2025-07-14T10:51:05Z","modified":"2026-03-23T04:49:36.75657Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02472-1","title":"Security update for gstreamer-plugins-base","description":"This update for gstreamer-plugins-base fixes the following issues:\n\n- CVE-2025-47808: Fixed NULL-pointer dereference in TMPlayer subtitle parser (bsc#1244404).\n- CVE-2025-47807: Fixed NULL-pointer dereference in SubRip subtitle parser (bsc#1244403).\n- CVE-2025-47806: Fixed stack buffer overflow in SubRip subtitle parser (bsc#1244407).\n","status":"published","published":"2025-07-23T11:18:56Z","modified":"2026-02-04T04:07:36.694447Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02796-1","title":"Security update for gstreamer-plugins-base","description":"This update for gstreamer-plugins-base fixes the following issues:\n\n- CVE-2025-47808: Fixed NULL-pointer dereference in TMPlayer subtitle parser (bsc#1244404).\n- CVE-2025-47807: Fixed NULL-pointer dereference in SubRip subtitle parser (bsc#1244403).\n- CVE-2025-47806: Fixed stack buffer overflow in SubRip subtitle parser (bsc#1244407).\n","status":"published","published":"2025-08-14T14:35:43Z","modified":"2026-03-23T04:47:51.481883Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:02919-1","title":"Security update for gstreamer-0_10-plugins-base","description":"This update for gstreamer-0_10-plugins-base fixes the following issues:\n\n- CVE-2025-47808: Fixed stack buffer overflow in SubRip subtitle parser (bsc#1244404)\n- CVE-2025-47807: Fixed NULL-pointer dereference in TMPlayer subtitle parser (bsc#1244403)\n- CVE-2025-47806: Fixed NULL-pointer dereference in SubRip subtitle parser (bsc#1244407)\n","status":"published","published":"2025-08-19T13:52:42Z","modified":"2026-03-23T04:46:54.007117Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:20507-1","title":"Security update for gstreamer-plugins-base","description":"This update for gstreamer-plugins-base fixes the following issues:\n\n- CVE-2025-47807: Fixed NULL-pointer dereference in SubRip subtitle parser (bsc#1244403)\n- CVE-2025-47808: Fixed NULL-pointer dereference in TMPlayer subtitle parser (bsc#1244404)\n- CVE-2025-47806: Fixed Stack buffer overflow in SubRip subtitle parser (bsc#1244407)\n","status":"published","published":"2025-07-24T11:46:58Z","modified":"2026-03-23T04:47:15.350359Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"SUSE-SU-2025:20751-1","title":"Security update for gstreamer-plugins-base","description":"This update for gstreamer-plugins-base fixes the following issues:\n\n\n- CVE-2025-47806: Fixed stack buffer overflow in SubRip subtitle parser (bsc#1244407).\n- CVE-2025-47807: Fixed NULL-pointer dereference in SubRip subtitle parser (bsc#1244403).\n- CVE-2025-47808: Fixed NULL-pointer dereference in TMPlayer subtitle parser (bsc#1244404).\n","status":"published","published":"2025-09-22T08:21:44Z","modified":"2026-03-23T04:50:16.364522Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"USN-7716-1","title":"gst-plugins-base1.0 vulnerabilities","description":"Shaun Mirani discovered that GStreamer Base Plugins incorrectly handled\ncertain malformed media files. An attacker could use these issues to cause\nGStreamer Base Plugins to crash, resulting in a denial of service, or\npossibly execute arbitrary code.","status":"published","published":"2025-08-26T13:11:48Z","modified":"2026-04-22T11:01:59.14786Z","updated_at":"2026-11-02T16:58:21.91885Z"},{"id":"USN-7827-1","title":"gst-plugins-base1.0 vulnerabilities","description":"Shaun Mirani discovered that GStreamer Base Plugins did not correctly\nhandle certain memory operations. An attacker could possibly use this issue\nto cause a denial of service.","status":"published","published":"2025-10-20T00:04:43Z","modified":"2026-06-25T13:32:31.16669403Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}