yocto ▾
›
kirkstone ▾
›
vulnerability
›
CVE-2025-47807
Component Overview
Vulnerability Overview
Name
CVE-2025-47807
Source
NVD (
link
)
Debian (
link
)
Description
In GStreamer through 1.26.1, the subparse plugin's subrip_unescape_formatting function may dereference a NULL pointer while parsing a subtitle file, leading to a crash.
CWEs
CWE-476
CWE-476
Published Date
Aug 7, 2025
Updated Date
Jun 17, 2026
Workaround
-
Advisories
https://github.com/atredispartners/advisories/blob/master/2025/ATREDIS-2025-0003.md
Exploit
https://gstreamer.freedesktop.org/security/
Vendor Advisory
https://github.com/atredispartners/advisories/blob/master/2025/ATREDIS-2025-0003.md
Exploit
Analysis
#
Affected Component
Analysis
gstreamer1.0-plugins-base
Patched
Vulnerability Ratings
#
5.5
CVSSv31
5.5
CVSSv31
NaN
other
Others affected components
#
Name
Project
Project Version
Version
Status
gst1-plugins-base
openwrt
master
1.26.4-r2
Not Affected
gst1-plugins-base
openwrt
openwrt-25.12
1.26.4-r1
Not Affected
gstreamer1.0-plugins-base
yocto
master
1.28.4
Not Affected
gstreamer1.0-plugins-base
yocto
scarthgap
1.22.12
Patched
Resolved with patches
#
gstreamer1.0-plugins-base (yocto:kirkstone)
#
Title
Author
Resolve
1
subparse: Check for valid UTF-8 before cleaning up lines and
=?UTF-8?q?Sebastian=20Dr=C3=B6ge?= <sebastian@centricular.com>
CVE-2025-47807
gstreamer1.0-plugins-base (yocto:scarthgap)
#
Title
Author
Resolve
1
subparse: Check for valid UTF-8 before cleaning up lines and
=?UTF-8?q?Sebastian=20Dr=C3=B6ge?= <sebastian@centricular.com>
CVE-2025-47807