CVE-2025-47219: gstreamer Out-of-bounds Read
CVSS: 8.1v3.1HighModified
AliasesUBUNTU-CVE-2025-47219USN-7837-1DEBIAN-CVE-2025-47219CGA-235c-3386-wfxjCGA-2375-xfh5-6xm4CGA-23wj-p2rq-j3v4CGA-29q8-frp9-fr65CGA-2crj-2968-pxfqCGA-2h3g-wwmm-fhmvCGA-2mf7-f2cp-3vcpCGA-2rh2-848f-4cm5CGA-373c-m4fw-w9p9CGA-3q8j-9hcr-m4c9CGA-3w2w-pq5m-698qCGA-4cp7-h7h6-9cxrCGA-58xx-3fx4-79pwCGA-596g-gc6q-5gqvCGA-5c5w-p99j-46j5CGA-5jxg-85pp-6r2hCGA-5r49-q5xm-pf2mCGA-5w36-837q-9pmgCGA-5wqw-4fqq-wff5CGA-6fxq-4qq4-2gr2CGA-6j8f-qg86-m46xCGA-72ff-jmj2-hh3pCGA-75hr-j5g7-c4hcCGA-76c6-mjv9-wc4wCGA-78x5-pqv2-7cfxCGA-79fm-x2wq-rmghCGA-7crf-9f9x-6m27CGA-7xm7-m773-xpxpCGA-84g9-24gp-2rqxCGA-875w-mf64-c55cCGA-8f56-gm4v-6v63CGA-8j92-5p44-3h88CGA-8p6j-hq69-r2qrCGA-8x4m-hvgx-r73xCGA-8xw9-j3q3-hv3fCGA-93mf-3fr5-p4hjCGA-9jjp-394m-759rCGA-9q5g-9fq6-7w58CGA-9vxm-48p4-j6ghCGA-c2vw-hm8w-hw7jCGA-cqw7-m53w-hqxxCGA-cv4x-h5g3-6q8rCGA-cwcq-795m-w37jCGA-ff5h-pxg9-83w5CGA-fjpf-gg7m-fpf2CGA-fm3h-9gj6-72j2CGA-fmcj-w8g7-mxmxCGA-g9m8-hqpp-696hCGA-gmjm-c7gh-4g63CGA-h455-24hv-wxhcCGA-h65q-mjwq-3rrrCGA-j42w-h2cv-gpfqCGA-j86x-rjqj-43gwCGA-j93p-qmmg-5f85CGA-jpwx-fvvh-jw3wCGA-jv3p-c8vh-f73rCGA-m649-pr4x-qmfmCGA-m7xm-vxcp-7qgvCGA-mqqq-qvx6-rjjvCGA-mr6f-jjqc-923qCGA-p56j-mqm5-8mmwCGA-p6xh-42h6-78hfCGA-q5cf-rjx4-3w2qCGA-q5m3-f5gq-53g6CGA-q78j-w6f2-pv8gCGA-qp6c-q2x7-h7mjCGA-r2mh-8vf9-pm8jCGA-r95r-6763-xg49CGA-r9wx-vrrw-fgm7CGA-rf96-j8rp-q26wCGA-rrjg-gm7v-p7m8CGA-rrpw-5hvw-fpwjCGA-rrwc-6p96-9cf6CGA-v583-p7gp-w794CGA-ww8g-wq4g-xph4CGA-x3r3-9h3g-mxhqCGA-xh7w-g2g9-852jCGA-xpg8-5p52-r4xr
Published 07-08-2025Last modified 12-05-2026
Vulnerability summary
CVE-2025-47219 is a high (CVSS 8.1) Out-of-bounds Read vulnerability in gstreamer. EPSS estimates a 0.67% chance of exploitation in the next 30 days, higher than 50.9% of scored vulnerabilities. 1 public exploit is recorded.
CVSS score
8.1/10
010
High · v3.1 (CVE.org)EPSS score
0.67%
0%100%
Low · +0.02 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1github
Advisory lineage
Upstream 0 · Downstream 4 · Related 4Timeline
- 07-08-2025PublishedVulnerability first disclosed.
- 12-05-2026Last modifiedVulnerability information updated.
Description
In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read past the end of a heap buffer while parsing an MP4 file, possibly leading to information disclosure.
CVSS metrics
5 scores · 5 sources · 1 versionHigh 8.1Preferred score · CVE.org (CNA)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HSourcesAll 5 agree
- OSV · UbuntuEcosystem advisory · calculated8.1HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated8.1HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · ChainguardEcosystem advisory · calculated8.1HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- NVDNIST8.1HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.67%
Chance of exploitation in the next 30 days
Percentile
51%
Versus all other CVEs
30-day change
+0.02 pp
From 0.65% on 18-09-2026
18-09-202618-10-2026
EPSS score0.67%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundAdvisories
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Chainguard39 products
- openjdk-11-openj9< 0.59.0-r2
- openjdk-11-openj9-dbg< 0.59.0-r2
- openjdk-11-openj9-default-jdk< 0.59.0-r2
- openjdk-11-openj9-default-jvm< 0.59.0-r2
- openjdk-11-openj9-doc< 0.59.0-r2
Debian1 product
- gst-plugins-good1.0< 1.22.0-5+deb12u3 | < 1.26.2-1
Gstreamer1 product
- gstreamer< 1.26.2
Ubuntu1 product
- gst-plugins-good1.0All versions (No fix recorded) | < 1.20.3-0ubuntu1.4 | < 1.24.2-1ubuntu1.2 | < 1.26.2-1ubuntu1 | < 1.14.5-0ubuntu1~18.04.3+esm1 | < 1.16.3-0ubuntu1.3+esm1
4 vendors · 42 products
References
10 links- github.com/atredispartners/advisories/blob/master/2025/ATREDIS-2025-0003.mdREPORTAdvisoryExploitThird Party Advisory
