SUSE-SU-2025:02020-1: gstreamer-plugins-base&distro=SUSE Enterprise Storage 7.1 SUSE Linux Enterprise

CVSS: UnknownPublished
Published 19-06-2025Last modified 23-03-2026
Open JSON

Vulnerability summary

SUSE-SU-2025:02020-1 is a vulnerability in gstreamer-plugins-base&distro=SUSE Enterprise Storage 7.1 SUSE Linux Enterprise with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 10 · Downstream 0 · Related 10
CVE-2024-47538CVE-2024-47541CVE-2024-47542CVE-2024-47600CVE-2024-47607CVE-2024-47615

Timeline

  1. 19-06-2025
    PublishedVulnerability first disclosed.
  2. 23-03-2026
    Last modifiedVulnerability information updated.

Description

Security update for gstreamer-plugins-base This update for gstreamer-plugins-base fixes the following issues: - CVE-2024-47538: Fixed stack-buffer overflow in vorbis_handle_identification_packet (bnc#1234415) - CVE-2024-47600: Fixed out-of-bounds read in gst-discoverer-1.0 commandline tool (bnc#1234453) - CVE-2024-47615: Fixed out-of-bounds write in Ogg demuxer (bnc#1234456) - CVE-2024-47542: Fixed ID3v2 parser out-of-bounds read and NULL-pointer dereference (bnc#1234460) - CVE-2024-47607: Fixed stack buffer-overflow in Opus decoder (bnc#1234455) - CVE-2024-47835: Fixed NULL-pointer dereference in LRC subtitle parser (bnc#1234450) - CVE-2024-47541: Fixed out-of-bounds write in SSA subtitle parser (bnc#1234459) - CVE-2025-47808: Fixed NULL-pointer dereference in TMPlayer subtitle parser (boo#1244404) - CVE-2025-47807: Fixed NULL-pointer dereference in SubRip subtitle parser (boo#1244403) - CVE-2025-47806: Fixed Stack buffer overflow in SubRip subtitle parser (boo#1244407)

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Suse5 products
  • gstreamer-plugins-base&distro=SUSE Enterprise Storage 7.1< 1.16.3-150200.4.19.1
  • gstreamer-plugins-base&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS< 1.16.3-150200.4.19.1
  • gstreamer-plugins-base&distro=SUSE Linux Enterprise Micro 5.2< 1.16.3-150200.4.19.1
  • gstreamer-plugins-base&distro=SUSE Linux Enterprise Server 15 SP3-LTSS< 1.16.3-150200.4.19.1
  • gstreamer-plugins-base&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3< 1.16.3-150200.4.19.1

1 vendor · 5 products

References

21 links
Show all 21 references