CVE-2025-47183 Information

Aug 08, 2025 cve

Description

In GStreamer through 1.26.1 the isomp4 plugin’s qtdemux_parse_tree function may read past the end of a heap buffer while parsing an MP4 file leading to information disclosure.

Reference

https://github.com/atredispartners/advisories/blob/master/2025/ATREDIS-2025-0003.md https://gstreamer.freedesktop.org/security/

CNNVD-202508-708 (Published: 2025-08-07)

Share on: