Medium DLA-4371-1 3 CVEs

gst-plugins-base1.0 - security update

Published Nov 14, 2025 · Updated Nov 14, 2025

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 11	gst-plugins-base1.0	1.18.4-2+deb11u4

Vulnerabilities 3

Medium 5.6

CVE-2025-47806

In GStreamer through 1.26.1, the subparse plugin's parse_subrip_time function may write data past the bounds of a stack…

gst-plugins-base1.0 gst-plugins-base1.0 gstreamer1-plugins-base gst-plugins-base Debian Ubuntu Azure Linux Alpine

Aug 7, 2025
Medium 5.6

CVE-2025-47808

In GStreamer through 1.26.1, the subparse plugin's tmplayer_parse_line function may dereference a NULL pointer while pa…

gst-plugins-base1.0 gst-plugins-base1.0 gstreamer1-plugins-base gst-plugins-base Debian Ubuntu Azure Linux Alpine

Aug 7, 2025
Medium 5.5

CVE-2025-47807

In GStreamer through 1.26.1, the subparse plugin's subrip_unescape_formatting function may dereference a NULL pointer w…

gst-plugins-base1.0 gst-plugins-base1.0 gstreamer1-plugins-base gst-plugins-base Debian Ubuntu Azure Linux Alpine

Aug 7, 2025