In GStreamer through 1.26.1, the subparse plugin's parse_subrip_time function may write data past the bounds of a stack buffer, leading to a crash.
A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
| Link | Tags |
|---|---|
| https://gstreamer.freedesktop.org/security/ | vendor advisory |
| https://github.com/atredispartners/advisories/blob/master/2025/ATREDIS-2025-0003.md | third party advisory exploit |