CVE-2025-47219 Information disclosure in n/a
An attacker can read past the end of a heap buffer in GStreamer's MP4 parser, potentially disclosing sensitive memory contents.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-47219?
CVE-2025-47219 is a high-severity vulnerability in Gstreamer Gstreamer, published on 7 Aug 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read past the end of a heap buffer while parsing an MP4 file, possibly leading to information disclosure.
Weakness: CWE-125
Which versions are affected by CVE-2025-47219?
3 open source packages ship an affected version, including java, java-min and jre. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
java Bitnami | All versions | 1.8.0, 8.0.481 |
java-min Bitnami | All versions | 1.8.0, 8.0.481 |
jre Bitnami | All versions | 1.8.0, 8.0.481 |
Products include Gstreamer Gstreamer.
How do I fix CVE-2025-47219?
Upgrade java to a fixed version for your release line: 1.8.0 or 8.0.481.
Is CVE-2025-47219 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-47219 exists.
Other vulnerabilities in Gstreamer Gstreamer
- CVE-2026-3083 GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2026-3085 GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-37328 GStreamer PGS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-37329 GStreamer SRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-38103 GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability
Sources
Also known as BIT-java-2025-47219, BIT-java-min-2025-47219, BIT-jre-2025-47219, DEBIAN-CVE-2025-47219, GHSA-8h3r-68m6-vm7c, MINI-7pqm-r477-qrgf and 3 more.