UBUNTU-CVE-2025-2759: gstreamer1.0 Ubuntu
Vulnerability summary
UBUNTU-CVE-2025-2759 is a vulnerability in gstreamer1.0 Ubuntu with no CVSS score yet.
Advisory lineage
Upstream 0 · Downstream 0 · Related 1Timeline
- 23-05-2025PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
GStreamer Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of GStreamer. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the product installer. The issue results from incorrect permissions on folders. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of a target user. Was ZDI-CAN-25448.
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu1 product
- gstreamer1.0All versions (No fix recorded)
1 vendor · 1 product