CVE-2025-47219 Information

Aug 08, 2025 cve

Description

In GStreamer through 1.26.1 the isomp4 plugin’s qtdemux_parse_trak function may read past the end of a heap buffer while parsing an MP4 file possibly leading to information disclosure.

Reference

https://github.com/atredispartners/advisories/blob/master/2025/ATREDIS-2025-0003.md https://gstreamer.freedesktop.org/security/

CNNVD-202508-709 (Published: 2025-08-07)

Share on: