Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-47219

Fixed in a distro release EPSS <1%CVSS 8.1

In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read past the end of a heap buffer while parsing an MP4 file, possibly leading to information disclosure.

Published 2025-08-07 · CVE record · OSV

Products: Siemens SIMATIC CN 4100

Distro releases

ReleasePackageFixed in
Amazon Linux 2gstreamer1-plugins-good1.18.4-6.amzn2.0.8
Amazon Linux 2gstreamer1-plugins-good-gtk1.18.4-6.amzn2.0.8
Amazon Linux 2023gstreamer1-plugins-good1.24.10-1.amzn2023.0.3
Amazon Linux 2023gstreamer1-plugins-good-gtk1.24.10-1.amzn2023.0.3
Chainguardopenjdk-11-openj90.59.0-r2
Chainguardopenjdk-11-openj9-dbg0.59.0-r2
Chainguardopenjdk-11-openj9-default-jdk0.59.0-r2
Chainguardopenjdk-11-openj9-default-jvm0.59.0-r2
Chainguardopenjdk-11-openj9-doc0.59.0-r2
Chainguardopenjdk-11-openj9-jmods0.59.0-r2
Chainguardopenjdk-11-openj9-jre0.59.0-r2
Chainguardopenjdk-17-openj90.59.0-r1
Chainguardopenjdk-17-openj9-dbg0.59.0-r1
Chainguardopenjdk-17-openj9-default-jdk0.59.0-r1
Chainguardopenjdk-17-openj9-default-jvm0.59.0-r1
Chainguardopenjdk-17-openj9-doc0.59.0-r1
Chainguardopenjdk-17-openj9-jmods0.59.0-r1
Chainguardopenjdk-17-openj9-jre0.59.0-r1
Chainguardopenjdk-21-openj90.59.0-r1
Chainguardopenjdk-21-openj9-dbg0.59.0-r1
Chainguardopenjdk-21-openj9-default-jdk0.59.0-r1
Chainguardopenjdk-21-openj9-default-jvm0.59.0-r1
Chainguardopenjdk-21-openj9-doc0.59.0-r1
Chainguardopenjdk-21-openj9-jmods0.59.0-r1
Chainguardopenjdk-21-openj9-jre0.59.0-r1
Chainguardopenjdk-25-openj90.59.0-r1
Chainguardopenjdk-25-openj9-dbg0.59.0-r1
Chainguardopenjdk-25-openj9-default-jdk0.59.0-r1
Chainguardopenjdk-25-openj9-default-jvm0.59.0-r1
Chainguardopenjdk-25-openj9-jmods0.59.0-r1
Chainguardopenjdk-25-openj9-jre0.59.0-r1
Chainguardopenjdk-26-openj90.59.0-r1
Chainguardopenjdk-26-openj9-dbg0.59.0-r1
Chainguardopenjdk-26-openj9-default-jdk0.59.0-r1
Chainguardopenjdk-26-openj9-default-jvm0.59.0-r1
Chainguardopenjdk-26-openj9-jmods0.59.0-r1
Chainguardopenjdk-26-openj9-jre0.59.0-r1
Chainguardopenjdk-8-openj90.59.0-r1
Chainguardopenjdk-8-openj9-dbg0.59.0-r1
Chainguardopenjdk-8-openj9-default-jdk0.59.0-r1
Chainguardopenjdk-8-openj9-default-jvm0.59.0-r1
Chainguardopenjdk-8-openj9-doc0.59.0-r1
Chainguardopenjdk-8-openj9-jre0.59.0-r1
Debian 11gst-plugins-good1.01.18.4-2+deb11u4
Debian 12gst-plugins-good1.01.22.0-5+deb12u3
Debian 13gst-plugins-good1.01.26.2-1
Debian 14gst-plugins-good1.01.26.2-1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSgstreamer-plugins-good1.22.0-150500.4.10.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSgstreamer-plugins-good1.22.0-150500.4.10.1
SUSE Linux Enterprise Module for Basesystem 15 SP6gstreamer-plugins-good1.24.0-150600.3.7.1
SUSE Linux Enterprise Module for Basesystem 15 SP7gstreamer-plugins-good1.24.0-150600.3.7.1
SUSE Linux Enterprise Server 15 SP5-LTSSgstreamer-plugins-good1.22.0-150500.4.10.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5gstreamer-plugins-good1.22.0-150500.4.10.1
SUSE Linux Enterprise Workstation Extension 15 SP6gstreamer-plugins-good1.24.0-150600.3.7.1
SUSE Linux Enterprise Workstation Extension 15 SP7gstreamer-plugins-good1.24.0-150600.3.7.1
Ubuntu 22.04 LTSgst-plugins-good1.01.20.3-0ubuntu1.4
Ubuntu 24.04 LTSgst-plugins-good1.01.24.2-1ubuntu1.2
Ubuntu 25.10gst-plugins-good1.01.26.2-1ubuntu1
Ubuntu Pro 16.04 LTSgst-plugins-good1.0no fix
Ubuntu Pro 18.04 LTSgst-plugins-good1.01.14.5-0ubuntu1~18.04.3+esm1
Ubuntu Pro 20.04 LTSgst-plugins-good1.01.16.3-0ubuntu1.3+esm1
openSUSE Leap 15.6gstreamer-plugins-good1.24.0-150600.3.7.1