PT-2025-30626 · Gstreamer+6 · Gstreamer+7

CVE-2025-47807 · Publicado 2025-06-03 · Atualizado 2025-11-14

Positive Technologies (AI Summary) · Pt

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Nome do Software Vulnerável e Versões Afetadas Versões do GStreamer até a 1.26.1

Descrição A função subrip unescape formatting no plugin subparse pode desreferenciar um ponteiro NULL durante a análise de arquivos de legenda, resultando em uma falha.

Recomendações Atualize para uma versão superior à 1.26.1.

Exploit

Correção

DoS

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

ALT-PU-2025-9414

AZL-66183

AZL-66189

BDU:2025-14444

CVE-2025-47807

DLA-4371-1

OESA-2025-1616

SUSE-SU-2025:02020-1

SUSE-SU-2025:02302-1

SUSE-SU-2025:02304-1

SUSE-SU-2025:02472-1

SUSE-SU-2025:02796-1

SUSE-SU-2025:02919-1

SUSE-SU-2025:20507-1

SUSE-SU-2025:20751-1

SUSE-SU-2025_02020-1

SUSE-SU-2025_02302-1

SUSE-SU-2025_02304-1

SUSE-SU-2025_02919-1

USN-7716-1

USN-7827-1

Produtos afetados

Alt Linux

Debian

Gstreamer

Linuxmint

Red Os

Suse

Ubuntu

Subparse

Referências · 75

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/47xxx/CVE-2025-47807.json · Exploit
• 🔥 https://github.com/atredispartners/advisories/blob/master/2025/ATREDIS-2025-0003.md · Exploit
• https://osv.dev/vulnerability/BELL-CVE-2025-47807 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-47807 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2025-47807 · Nota de Segurança
• https://security.alpinelinux.org/vuln/CVE-2025-47807 · Nota
• https://openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1616 · Nota
• https://gstreamer.freedesktop.org/security · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2025-47808 · Nota
• https://osv.dev/vulnerability/USN-7827-1 · Aviso do Fabricante
• https://bugzilla.suse.com/1234456 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2025:20751-1 · Aviso do Fabricante
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-gstreamer1-plugins-base-cve-2025-47808-cve-2025-47807-cve-2025-47806 · Nota
• https://suse.com/ko-kr/security/cve/CVE-2025-47807.html · Nota
• https://twitter.com/CVEnew/status/1953541543496749241 · Publicação no Twitter