CVE Vulnerabilities

CVE-2025-47808

NULL Pointer Dereference

Published: Aug 07, 2025 | Modified: Aug 12, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
5.6 MODERATE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Ubuntu
MEDIUM
root.io logo minimus.io logo echo.ai logo

In GStreamer through 1.26.1, the subparse plugins tmplayer_parse_line function may dereference a NULL pointer while parsing a subtitle file, leading to a crash.

Weakness

The product dereferences a pointer that it expects to be valid but is NULL.

Affected Software

NameVendorStart VersionEnd Version
GstreamerGstreamer_project*1.26.2 (excluding)
Gst-plugins-base1.0Ubuntudevel*
Gst-plugins-base1.0Ubuntuesm-infra/bionic*
Gst-plugins-base1.0Ubuntuesm-infra/focal*
Gst-plugins-base1.0Ubuntuesm-infra/xenial*
Gst-plugins-base1.0Ubuntujammy*
Gst-plugins-base1.0Ubuntunoble*
Gst-plugins-base1.0Ubuntuplucky*
Gst-plugins-base1.0Ubuntuquesting*
Gst-plugins-base1.0Ubuntuupstream*

Potential Mitigations

References