In GStreamer through 1.26.1, the subparse plugin's parse_subrip_time function may write data past the bounds of a stack buffer, leading to a crash.
CVSS Details
- CVSS 3.1 Base Score: 5.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gst-plugins-baseUpgrade gstreamer | Aug 8, 2025 | Aug 7, 2025 |
| Amazon Linux Ami 2 | — | Upgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-base-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade gstreamer1-plugins-base-debugsourceUpgrade gstreamer1-plugins-base-debuginfoUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-base-tools-debuginfo | Sep 16, 2025 | Aug 7, 2025 |
| Debian | — | Upgrade gst-plugins-base1.0 | Sep 8, 2025 | Sep 8, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Aug 7, 2025 |
| Suse | — | Upgrade libgstrtp-1_0-0-32bitUpgrade libgstgl-1_0-0-32bitUpgrade libgstgl-1_0-0Upgrade typelib-1_0-gstvideo-1_0Upgrade libgstfft-1_0-0-32bitUpgrade typelib-1_0-gstglx11-1_0Upgrade gstreamer-plugins-base-32bitUpgrade typelib-1_0-gstaudio-1_0Upgrade typelib-1_0-gstsdp-1_0Upgrade typelib-1_0-gstrtp-1_0Upgrade gstreamer-0_10-plugins-base-develUpgrade typelib-1_0-gstglegl-1_0Upgrade libgstrtsp-1_0-0Upgrade libgstvideo-1_0-0-32bitUpgrade libgstfft-1_0-0Upgrade libgstallocators-1_0-0-32bitUpgrade typelib-1_0-gstrtsp-1_0Upgrade libgstapp-1_0-0Upgrade typelib-1_0-gstgl-1_0Upgrade typelib-1_0-gstpbutils-1_0Upgrade libgstpbutils-1_0-0Upgrade libgstvideo-1_0-0Upgrade gstreamer-plugins-baseUpgrade libgstpbutils-1_0-0-32bitUpgrade typelib-1_0-gsttag-1_0Upgrade libgstaudio-1_0-0Upgrade libgstriff-1_0-0-32bitUpgrade typelib-1_0-gstallocators-1_0Upgrade libgsttag-1_0-0Upgrade libgstrtsp-1_0-0-32bitUpgrade libgstapp-1_0-0-32bitUpgrade libgstsdp-1_0-0-32bitUpgrade gstreamer-plugins-base-develUpgrade libgstriff-1_0-0Upgrade gstreamer-plugins-base-langUpgrade gstreamer-plugins-base-devel-32bitUpgrade libgstsdp-1_0-0Upgrade libgstrtp-1_0-0Upgrade libgstaudio-1_0-0-32bitUpgrade libgstallocators-1_0-0Upgrade typelib-1_0-gstglwayland-1_0Upgrade typelib-1_0-gstapp-1_0Upgrade libgsttag-1_0-0-32bit | Dec 5, 2025 | Jun 19, 2025 |
| Ubuntu | — | Upgrade libgstreamer-plugins-base1.0-0 (Ubuntu Pro)Upgrade gstreamer1.0-xUpgrade libgstreamer-gl1.0-0Upgrade gstreamer1.0-alsaUpgrade gstreamer1.0-glUpgrade gstreamer1.0-plugins-base-appsUpgrade libgstreamer-plugins-base1.0-0Upgrade gstreamer1.0-plugins-baseUpgrade libgstreamer-plugins-base1.0-dev (Ubuntu Pro) | Aug 27, 2025 | Aug 7, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub