In GStreamer through 1.26.1, the subparse plugin's tmplayer_parse_line function may dereference a NULL pointer while parsing a subtitle file, leading to a crash.
CVSS Details
- CVSS 3.1 Base Score: 5.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gstreamerUpgrade gst-plugins-base | Aug 8, 2025 | Aug 7, 2025 |
| Amazon Linux Ami 2 | — | Upgrade gstreamer1-plugins-base-debuginfoUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-base-devel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-base-develUpgrade gstreamer1-plugins-base-debugsourceUpgrade gstreamer1-plugins-base-debuginfoUpgrade gstreamer1-plugins-base-tools-debuginfoUpgrade gstreamer1-plugins-base-tools | Sep 16, 2025 | Aug 7, 2025 |
| Debian | — | Upgrade gst-plugins-base1.0 | Sep 8, 2025 | Sep 8, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Aug 7, 2025 |
| Suse | — | Upgrade libgsttag-1_0-0Upgrade libgstaudio-1_0-0Upgrade libgstfft-1_0-0-32bitUpgrade libgsttag-1_0-0-32bitUpgrade gstreamer-plugins-base-32bitUpgrade libgstpbutils-1_0-0Upgrade libgstrtp-1_0-0-32bitUpgrade libgstvideo-1_0-0-32bitUpgrade libgstsdp-1_0-0-32bitUpgrade typelib-1_0-gstvideo-1_0Upgrade libgstallocators-1_0-0-32bitUpgrade typelib-1_0-gstrtp-1_0Upgrade libgstriff-1_0-0Upgrade gstreamer-plugins-base-develUpgrade typelib-1_0-gstrtsp-1_0Upgrade libgstriff-1_0-0-32bitUpgrade typelib-1_0-gstglx11-1_0Upgrade typelib-1_0-gstallocators-1_0Upgrade typelib-1_0-gstsdp-1_0Upgrade typelib-1_0-gsttag-1_0Upgrade libgstvideo-1_0-0Upgrade libgstrtsp-1_0-0-32bitUpgrade libgstsdp-1_0-0Upgrade typelib-1_0-gstglwayland-1_0Upgrade libgstrtsp-1_0-0Upgrade libgstapp-1_0-0Upgrade typelib-1_0-gstapp-1_0Upgrade libgstaudio-1_0-0-32bitUpgrade gstreamer-plugins-base-devel-32bitUpgrade typelib-1_0-gstgl-1_0Upgrade libgstfft-1_0-0Upgrade typelib-1_0-gstaudio-1_0Upgrade libgstapp-1_0-0-32bitUpgrade gstreamer-plugins-baseUpgrade typelib-1_0-gstpbutils-1_0Upgrade typelib-1_0-gstglegl-1_0Upgrade libgstgl-1_0-0Upgrade libgstgl-1_0-0-32bitUpgrade libgstpbutils-1_0-0-32bitUpgrade gstreamer-plugins-base-langUpgrade libgstrtp-1_0-0Upgrade libgstallocators-1_0-0Upgrade gstreamer-0_10-plugins-base-devel | Dec 5, 2025 | Jun 19, 2025 |
| Ubuntu | — | Upgrade gstreamer1.0-plugins-baseUpgrade gstreamer1.0-glUpgrade libgstreamer-plugins-base1.0-dev (Ubuntu Pro)Upgrade libgstreamer-plugins-base1.0-0Upgrade libgstreamer-gl1.0-0Upgrade gstreamer1.0-alsaUpgrade libgstreamer-plugins-base1.0-0 (Ubuntu Pro)Upgrade gstreamer1.0-plugins-base-appsUpgrade gstreamer1.0-x | Aug 27, 2025 | Aug 7, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub