PT-2025-30625 · Gstreamer+6 · Gstreamer+6

Published 2025-06-03 · Updated 2025-11-14 · CVE-2025-47806

Positive Technologies (AI Summary)

CVSS v3.1

5.6

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions GStreamer versions through 1.26.1

Description The parse subrip time function within the subparse plugin may write data beyond the allocated buffer on the stack, potentially causing a crash.

Recommendations Update GStreamer to a version later than 1.26.1.

Exploit

Fix

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

ALT-PU-2025-9414

AZL-66180

AZL-66186

BDU:2025-14442

CVE-2025-47806

DLA-4371-1

OESA-2025-1616

SUSE-SU-2025:02020-1

SUSE-SU-2025:02302-1

SUSE-SU-2025:02304-1

SUSE-SU-2025:02472-1

SUSE-SU-2025:02796-1

SUSE-SU-2025:02919-1

SUSE-SU-2025:20507-1

SUSE-SU-2025:20751-1

SUSE-SU-2025_02020-1

SUSE-SU-2025_02302-1

SUSE-SU-2025_02304-1

SUSE-SU-2025_02919-1

USN-7716-1

USN-7827-1

Affected Products

Alt Linux

Debian

Gstreamer

Linuxmint

Red Os

Suse

Ubuntu

References · 77

• 🔥 https://github.com/atredispartners/advisories/blob/master/2025/ATREDIS-2025-0003.md · Exploit
• https://ubuntu.com/security/CVE-2025-47808 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-47806 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2025-47806 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02796-1 · Vendor Advisory
• https://gstreamer.freedesktop.org/security · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2026-0224SE18 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-47806 · Security Note
• https://osv.dev/vulnerability/AZL-66180 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02302-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7827-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-47806 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-47806 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7716-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2026-0421SE17 · Vendor Advisory