CVE-2025-47183
In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_tree function may read past the end of a heap buffer while parsing an MP4 file, leading to information disclosure.
Published Updated
PatchFirst · Latest vulnerabilities
Vulnerabilities published for gst-plugins-good1.0 in the last 30 days: 3. Listed in the KEV catalogue: 0.
Vulnerabilities: 21
In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_tree function may read past the end of a heap buffer while parsing an MP4 file, leading to information disclosure.
Check your installed stack and versions against the current vulnerability feeds.