vulnerability

Red Hat: CVE-2025-3887: gstreamer1-plugins-bad-free: mingw-gstreamer1-plugins-bad-free: GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (Multiple Advisories)

Name: Red Hat: CVE-2025-3887: gstreamer1-plugins-bad-free: mingw-gstreamer1-plugins-bad-free: GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (Multiple Advisories)
Creator: Red Hat
Published: 2025-05-22T00:00:00.000Z
Keywords: CVE, CWE-121, CWE-787, Red Hat, 2025, 3887, gstreamer1, redhat-upgrade-gstreamer1-plugins-bad-free, redhat-upgrade-gstreamer1-plugins-bad-free-debuginfo, redhat-upgrade-gstreamer1-plugins-bad-free-debugsource, redhat-upgrade-gstreamer1-plugins-bad-free-devel, redhat-upgrade-gstreamer1-plugins-bad-free-libs, redhat-upgrade-gstreamer1-plugins-bad-free-libs-debuginfo, Severity 9

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:C/I:C/A:C)

Published

May 22, 2025

Added

May 28, 2025

Modified

Jun 12, 2026

Description

A flaw was found in GStreamer H265 Codec Parsing (gstreamer1-plugins-bad-free). This vulnerability allows remote attackers to execute arbitrary code by parsing H265 slice headers.

Solutions

redhat-upgrade-gstreamer1-plugins-bad-freeredhat-upgrade-gstreamer1-plugins-bad-free-debuginforedhat-upgrade-gstreamer1-plugins-bad-free-debugsourceredhat-upgrade-gstreamer1-plugins-bad-free-develredhat-upgrade-gstreamer1-plugins-bad-free-libsredhat-upgrade-gstreamer1-plugins-bad-free-libs-debuginfo

References

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report