In GStreamer through 1.26.1, the subparse plugin's subrip_unescape_formatting function may dereference a NULL pointer while parsing a subtitle file, leading to a crash.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gst-plugins-baseUpgrade gstreamer | Aug 8, 2025 | Aug 7, 2025 |
| Amazon Linux Ami 2 | — | Upgrade gstreamer1-plugins-base-toolsUpgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-base-debuginfoUpgrade gstreamer1-plugins-base-devel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade gstreamer1-plugins-base-debugsourceUpgrade gstreamer1-plugins-base-debuginfoUpgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-base-tools-debuginfo | Sep 16, 2025 | Aug 7, 2025 |
| Debian | — | Upgrade gst-plugins-base1.0 | Sep 8, 2025 | Sep 8, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Aug 7, 2025 |
| Suse | — | Upgrade typelib-1_0-gstsdp-1_0Upgrade libgstfft-1_0-0-32bitUpgrade libgstrtp-1_0-0Upgrade typelib-1_0-gstapp-1_0Upgrade libgstvideo-1_0-0-32bitUpgrade libgstrtp-1_0-0-32bitUpgrade typelib-1_0-gstvideo-1_0Upgrade typelib-1_0-gstglx11-1_0Upgrade libgstapp-1_0-0-32bitUpgrade libgstsdp-1_0-0-32bitUpgrade gstreamer-plugins-base-32bitUpgrade libgstfft-1_0-0Upgrade typelib-1_0-gstrtp-1_0Upgrade libgstallocators-1_0-0-32bitUpgrade libgstpbutils-1_0-0Upgrade libgstriff-1_0-0Upgrade libgstriff-1_0-0-32bitUpgrade gstreamer-plugins-base-develUpgrade libgsttag-1_0-0Upgrade typelib-1_0-gstallocators-1_0Upgrade libgstpbutils-1_0-0-32bitUpgrade libgstrtsp-1_0-0-32bitUpgrade libgstallocators-1_0-0Upgrade typelib-1_0-gsttag-1_0Upgrade typelib-1_0-gstrtsp-1_0Upgrade typelib-1_0-gstpbutils-1_0Upgrade typelib-1_0-gstglegl-1_0Upgrade gstreamer-plugins-base-devel-32bitUpgrade libgstrtsp-1_0-0Upgrade libgstgl-1_0-0-32bitUpgrade gstreamer-plugins-base-langUpgrade gstreamer-0_10-plugins-base-develUpgrade libgstvideo-1_0-0Upgrade typelib-1_0-gstglwayland-1_0Upgrade typelib-1_0-gstgl-1_0Upgrade libgstapp-1_0-0Upgrade libgstgl-1_0-0Upgrade typelib-1_0-gstaudio-1_0Upgrade libgstsdp-1_0-0Upgrade libgstaudio-1_0-0-32bitUpgrade libgstaudio-1_0-0Upgrade gstreamer-plugins-baseUpgrade libgsttag-1_0-0-32bit | Dec 5, 2025 | Jun 19, 2025 |
| Ubuntu | — | Upgrade gstreamer1.0-alsaUpgrade gstreamer1.0-glUpgrade libgstreamer-gl1.0-0Upgrade libgstreamer-plugins-base1.0-0 (Ubuntu Pro)Upgrade libgstreamer-plugins-base1.0-dev (Ubuntu Pro)Upgrade gstreamer1.0-plugins-baseUpgrade gstreamer1.0-xUpgrade gstreamer1.0-plugins-base-appsUpgrade libgstreamer-plugins-base1.0-0 | Aug 27, 2025 | Aug 7, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub