GStreamer H265 Codec Parsing Stack BOverflow CVE-2025-3887
CVE-2025-3887 Published on May 22, 2025

GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of H265 slice headers. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26596.

NVD

Weakness Type

What is a Stack Overflow Vulnerability?

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

CVE-2025-3887 has been classified to as a Stack Overflow vulnerability or weakness.


Products Associated with CVE-2025-3887

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2025-3887 are published in these products:

Canonical Ubuntu Linux
 
Gstreamerproject Gstreamer
 
Debian Linux
 

Affected Versions

GStreamer Version 2e8b542145c1b11f8b8d927f6c679fd8028ceb60 is affected by CVE-2025-3887

Exploit Probability

EPSS
0.61%
Percentile
69.26%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.