CVE-2023-40475
GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability
GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.
The specific flaw exists within the parsing of MXF video files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-21661.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability
GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.
The specific flaw exists within the parsing of MXF video files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-21661.
- Record
CVE-2023-40475- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-190
- Updated
- 2026-11-02
EUVDEUVD-2023-45046
GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.
The specific flaw exists within the parsing of MXF video files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-21661.
- Record
EUVD-2023-45046- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-r6qp-3cmm-v7xj
GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This...
GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.
The specific flaw exists within the parsing of MXF video files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21661.
- Record
GHSA-r6qp-3cmm-v7xj- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-190
- Updated
- 2026-11-02
NVD
GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.
The specific flaw exists within the parsing of MXF video files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-21661.
- Record
CVE-2023-40475- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-190
- Updated
- 2026-11-02
OSVALPINE-CVE-2023-40475
GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.
The specific flaw exists within the parsing of MXF video files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-21661.
- Record
ALPINE-CVE-2023-40475- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSV
GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability
GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.
The specific flaw exists within the parsing of MXF video files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-21661.
- Record
CVE-2023-40475- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-190
- Updated
- 2026-11-02
Show 18 moreShow less
OSVDEBIAN-CVE-2023-40475
GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of MXF video files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-21661.
- Record
DEBIAN-CVE-2023-40475- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2023-1709
gstreamer1-plugins-bad-free security update
GStreamer is a pipeline-based multi media framework that links together a wide variety of media processing systems to complete complex workflows, based on graphs of filters which operate on media data. This package contains plug-ins that are not tested well enough yet, or the code is not of good enough quality.
Security Fix(es):
VUL-0: CVE-2023-40474: gstreamer-plugins-bad: GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability(CVE-2023-40474)
VUL-0: CVE-2023-40475: gstreamer-plugins-bad: GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability(CVE-2023-40475)
VUL-0: CVE-2023-40476: gstreamer-plugins-bad: GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability(CVE-2023-40476)
- Record
OESA-2023-1709- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2024:2287
Red Hat Security Advisory: gstreamer1-plugins-bad-free security update
- Record
RHSA-2024:2287- CVSS 3.1
- 6.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2024:3060
Red Hat Security Advisory: gstreamer1-plugins-bad-free security update
- Record
RHSA-2024:3060- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-40475
GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of MXF video files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-21661.
- Record
UBUNTU-CVE-2023-40475- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVALSA-2024:2287 No score
Moderate: gstreamer1-plugins-bad-free security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.
Security Fix(es):
- gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with uncompressed video (CVE-2023-40474)
- gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with AES3 audio (CVE-2023-40475)
- gstreamer-plugins-bad: Integer overflow in H.265 video parser leading to stack overwrite (CVE-2023-40476)
- gstreamer-plugins-bad-free: buffer overflow vulnerability (CVE-2023-50186)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
- Record
ALSA-2024:2287- Updated
- 2026-11-02
OSVALSA-2024:3060 No score
Moderate: gstreamer1-plugins-bad-free security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.
Security Fix(es):
- gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with uncompressed video (CVE-2023-40474)
- gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with AES3 audio (CVE-2023-40475)
- gstreamer-plugins-bad: Integer overflow in H.265 video parser leading to stack overwrite (CVE-2023-40476)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
- Record
ALSA-2024:3060- Updated
- 2026-11-02
OSVMGASA-2023-0354 No score
Updated gstreamer packages fix many security vulnerabilities
Updated gstreamer packages fix many security issues (see the references below). Apart from the listed CVEs, ZDI-CAN-22300 is also fixed.
- Record
MGASA-2023-0354- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:0305-1 No score
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues:
Adding references for already fixed vulnerability:
- CVE-2023-50186: Fixed heap-based buffer overflow in the AV1 codec parser (ZDI-CAN-22300, bsc#1218534, bsc#1223263)
- CVE-2023-40475: Fixed GStreamer MXF File Parsing Integer Overflow (bsc#1215792).
- CVE-2023-44446: Fixed GStreamer MXF File Parsing Use-After-Free (bsc#1217213).
- CVE-2023-44429: Fixed GStreamer AV1 Codec Parsing Heap-based Buffer Overflow (bsc#1217211).
- Record
openSUSE-SU-2024:0305-1- Updated
- 2026-11-02
OSVRLSA-2024:2287 No score
Moderate: gstreamer1-plugins-bad-free security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.
Security Fix(es):
-
gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with uncompressed video (CVE-2023-40474)
-
gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with AES3 audio (CVE-2023-40475)
-
gstreamer-plugins-bad: Integer overflow in H.265 video parser leading to stack overwrite (CVE-2023-40476)
-
gstreamer-plugins-bad-free: buffer overflow vulnerability (CVE-2023-50186)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.
- Record
RLSA-2024:2287- Updated
- 2026-11-02
OSVRLSA-2024:3060 No score
Moderate: gstreamer1-plugins-bad-free security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.
Security Fix(es):
-
gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with uncompressed video (CVE-2023-40474)
-
gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with AES3 audio (CVE-2023-40475)
-
gstreamer-plugins-bad: Integer overflow in H.265 video parser leading to stack overwrite (CVE-2023-40476)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section.
- Record
RLSA-2024:3060- Updated
- 2026-11-02
OSVSUSE-SU-2023:4943-1 No score
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues:
- CVE-2023-40475: Fixed GStreamer MXF File Parsing Integer Overflow (bsc#1215792).
- CVE-2023-44446: Fixed GStreamer MXF File Parsing Use-After-Free (bsc#1217213).
- Record
SUSE-SU-2023:4943-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:4944-1 No score
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues:
- CVE-2023-40475: Fixed GStreamer MXF File Parsing Integer Overflow (bsc#1215792).
- Record
SUSE-SU-2023:4944-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:4947-1 No score
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues:
CVE-2023-40475: Fixed GStreamer MXF File Parsing Integer Overflow (bsc#1215792).
- Record
SUSE-SU-2023:4947-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:4971-1 No score
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues:
- CVE-2023-44446: Fixed GStreamer MXF File Parsing Use-After-Free (bsc#1217213).
- CVE-2023-40475: Fixed GStreamer MXF File Parsing Integer Overflow (bsc#1215792).
- Record
SUSE-SU-2023:4971-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:4972-1 No score
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues:
- CVE-2023-40475: Fixed GStreamer MXF File Parsing Integer Overflow (bsc#1215792).
- Record
SUSE-SU-2023:4972-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:0005-1 No score
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues:
- CVE-2023-44446: Fixed GStreamer MXF File Parsing Use-After-Free (bsc#1217213).
- CVE-2023-40475: Fixed GStreamer MXF File Parsing Integer Overflow (bsc#1215792).
- Record
SUSE-SU-2024:0005-1- Updated
- 2026-11-02
OSVUSN-6526-1 No score
gst-plugins-bad1.0 vulnerabilities
It was discovered that GStreamer Bad Plugins incorrectly handled certain media files. A remote attacker could use this issue to cause GStreamer Bad Plugins to crash, resulting in a denial of service, or possibly execute arbitrary code.
- Record
USN-6526-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gst-plugins-badAlpine:v3.18 |
before 1.22.7-r0 | 1.22.7-r0 |
gst-plugins-badAlpine:v3.19 |
before 1.22.6-r0 | 1.22.6-r0 |
gst-plugins-badAlpine:v3.20 |
before 1.22.6-r0 | 1.22.6-r0 |
gst-plugins-badAlpine:v3.21 |
before 1.22.6-r0 | 1.22.6-r0 |
gst-plugins-badAlpine:v3.22 |
before 1.22.6-r0 | 1.22.6-r0 |
gst-plugins-badAlpine:v3.23 |
before 1.22.6-r0 | 1.22.6-r0 |
gst-plugins-badAlpine:v3.24 |
before 1.22.6-r0 | 1.22.6-r0 |
gstreamer1-plugins-bad-freeAlmaLinux:9 From an advisory covering 4 CVEs |
before 1.22.1-4.el9 | 1.22.1-4.el9 |
gstreamer1-plugins-bad-free-develAlmaLinux:9 From an advisory covering 4 CVEs |
before 1.22.1-4.el9 | 1.22.1-4.el9 |
gstreamer1-plugins-bad-freeAlmaLinux:8 From an advisory covering 3 CVEs |
before 1.16.1-4.el8 | 1.16.1-4.el8 |
Show 77 moreShow less
| Package | Affected | Fixed |
|---|---|---|
gstreamer1-plugins-bad-free-develAlmaLinux:8 From an advisory covering 3 CVEs |
before 1.16.1-4.el8 | 1.16.1-4.el8 |
gst-plugins-bad1.0Debian:12 |
before 1.22.0-4+deb12u2, plus listed versions 1.22.0-41.22.0-4+deb12u1 |
1.22.0-4+deb12u2 |
gst-plugins-bad1.0Debian:13 |
before 1.22.7-1 | 1.22.7-1 |
gst-plugins-bad1.0Debian:14 |
before 1.22.7-1 | 1.22.7-1 |
gst-plugins-bad1.0Debian:10 From an advisory covering 3 CVEs |
before 1.14.4-1+deb10u4, plus listed versions 1.14.4-11.14.4-1+deb10u11.14.4-1+deb10u21.14.4-1+deb10u31.14.4-1deb10u1 |
1.14.4-1+deb10u4 |
gst-plugins-bad1.0Debian:11 From an advisory covering 3 CVEs |
before 1.18.4-3+deb11u2, plus listed versions 1.18.4-31.18.4-3+deb11u1 |
1.18.4-3+deb11u2 |
gst-plugins-bad1.0Debian:12 From an advisory covering 3 CVEs |
before 1.22.0-4+deb12u2, plus listed versions 1.22.0-41.22.0-4+deb12u1 |
1.22.0-4+deb12u2 |
gstreamer1.0Mageia:9 From an advisory covering 16 CVEs |
before 1.22.8-1.mga9 | 1.22.8-1.mga9 |
gstreamer1.0-plugins-baseMageia:9 From an advisory covering 16 CVEs |
before 1.22.8-1.mga9 | 1.22.8-1.mga9 |
gstreamer1.0-omxMageia:9 From an advisory covering 16 CVEs |
before 1.22.8-1.mga9 | 1.22.8-1.mga9 |
gstreamer1.0-pythonMageia:9 From an advisory covering 16 CVEs |
before 1.22.8-1.mga9 | 1.22.8-1.mga9 |
gstreamer1.0-plugins-goodMageia:9 From an advisory covering 16 CVEs |
before 1.22.8-1.mga9 | 1.22.8-1.mga9 |
gstreamer1.0-plugins-badMageia:9 From an advisory covering 16 CVEs |
before 1.22.8-1.mga9 | 1.22.8-1.mga9 |
gstreamer1.0-plugins-uglyMageia:9 From an advisory covering 16 CVEs |
before 1.22.8-1.mga9 | 1.22.8-1.mga9 |
gstreamer1.0-rtsp-serverMageia:9 From an advisory covering 16 CVEs |
before 1.22.8-1.mga9 | 1.22.8-1.mga9 |
gstreamer1.0-vaapiMageia:9 From an advisory covering 16 CVEs |
before 1.22.8-1.mga9 | 1.22.8-1.mga9 |
gstreamer1.0-devtoolsMageia:9 From an advisory covering 16 CVEs |
before 1.22.8-1.mga9 | 1.22.8-1.mga9 |
gstreamer1.0-libavMageia:9 From an advisory covering 16 CVEs |
before 1.22.8-1.mga9 | 1.22.8-1.mga9 |
gstreamer1.0-moodbarMageia:9 From an advisory covering 16 CVEs |
before 1.2.1-5.mga9 | 1.2.1-5.mga9 |
gstreamer1.0-editing-servicesMageia:9 From an advisory covering 16 CVEs |
before 1.22.8-1.mga9 | 1.22.8-1.mga9 |
gstreamer1.0-plugins-badMageia:9 From an advisory covering 16 CVEs |
before 1.22.8-1.mga9.tainted | 1.22.8-1.mga9.tainted |
gstreamer1.0-plugins-uglyMageia:9 From an advisory covering 16 CVEs |
before 1.22.8-1.mga9.tainted | 1.22.8-1.mga9.tainted |
gstreamer1-plugins-bad-freeopenEuler:20.03-LTS-SP1 From an advisory covering 3 CVEs |
before 1.16.2-3.oe1 | 1.16.2-3.oe1 |
gstreamer1-plugins-bad-freeopenEuler:20.03-LTS-SP3 From an advisory covering 3 CVEs |
before 1.16.2-3.oe1 | 1.16.2-3.oe1 |
gstreamer1-plugins-bad-freeopenEuler:22.03-LTS From an advisory covering 3 CVEs |
before 1.16.2-6.oe2203sp2 | 1.16.2-6.oe2203sp2 |
gstreamer1-plugins-bad-freeopenEuler:22.03-LTS-SP1 From an advisory covering 3 CVEs |
before 1.16.2-6.oe2203sp1 | 1.16.2-6.oe2203sp1 |
gstreamer1-plugins-bad-freeopenEuler:22.03-LTS-SP2 From an advisory covering 3 CVEs |
before 1.16.2-6.oe2203sp2 | 1.16.2-6.oe2203sp2 |
gstreamer1-plugins-bad-freeRed Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs |
before 0:1.22.1-4.el9 | 0:1.22.1-4.el9 |
gstreamer1-plugins-bad-free-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs |
before 0:1.22.1-4.el9 | 0:1.22.1-4.el9 |
gstreamer1-plugins-bad-free-debugsourceRed Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs |
before 0:1.22.1-4.el9 | 0:1.22.1-4.el9 |
gstreamer1-plugins-bad-free-debuginfoRed Hat:enterprise_linux:9::crb From an advisory covering 4 CVEs |
before 0:1.22.1-4.el9 | 0:1.22.1-4.el9 |
gstreamer1-plugins-bad-free-debugsourceRed Hat:enterprise_linux:9::crb From an advisory covering 4 CVEs |
before 0:1.22.1-4.el9 | 0:1.22.1-4.el9 |
gstreamer1-plugins-bad-free-develRed Hat:enterprise_linux:9::crb From an advisory covering 4 CVEs |
before 0:1.22.1-4.el9 | 0:1.22.1-4.el9 |
gstreamer1-plugins-bad-freeRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-4.el8 | 0:1.16.1-4.el8 |
gstreamer1-plugins-bad-free-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-4.el8 | 0:1.16.1-4.el8 |
gstreamer1-plugins-bad-free-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-4.el8 | 0:1.16.1-4.el8 |
gstreamer1-plugins-bad-free-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:1.16.1-4.el8 | 0:1.16.1-4.el8 |
gstreamer1-plugins-bad-free-debugsourceRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:1.16.1-4.el8 | 0:1.16.1-4.el8 |
gstreamer1-plugins-bad-free-develRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:1.16.1-4.el8 | 0:1.16.1-4.el8 |
gstreamer1-plugins-bad-freeRocky Linux:9 From an advisory covering 4 CVEs |
before 0:1.22.1-4.el9 | 0:1.22.1-4.el9 |
gstreamer1-plugins-bad-freeRocky Linux:8 From an advisory covering 3 CVEs |
before 0:1.16.1-4.el8 | 0:1.16.1-4.el8 |
gstreamer-plugins-badSUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 2 CVEs |
before 1.22.0-150500.3.17.1 | 1.22.0-150500.3.17.1 |
gstreamer-plugins-badSUSE:Linux Enterprise Module for Desktop Applications 15 SP5 From an advisory covering 2 CVEs |
before 1.22.0-150500.3.17.1 | 1.22.0-150500.3.17.1 |
gstreamer-plugins-badSUSE:Linux Enterprise Module for Package Hub 15 SP5 From an advisory covering 2 CVEs |
before 1.22.0-150500.3.17.1 | 1.22.0-150500.3.17.1 |
gstreamer-plugins-badSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS |
before 1.12.5-150000.3.18.1 | 1.12.5-150000.3.18.1 |
gstreamer-plugins-badSUSE:Linux Enterprise Server 15 SP1-LTSS |
before 1.12.5-150000.3.18.1 | 1.12.5-150000.3.18.1 |
gstreamer-plugins-badSUSE:Linux Enterprise Server for SAP Applications 15 SP1 |
before 1.12.5-150000.3.18.1 | 1.12.5-150000.3.18.1 |
gstreamer-plugins-badSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS |
before 1.16.3-150200.4.16.1 | 1.16.3-150200.4.16.1 |
gstreamer-plugins-badSUSE:Linux Enterprise Server 15 SP2-LTSS |
before 1.16.3-150200.4.16.1 | 1.16.3-150200.4.16.1 |
gstreamer-plugins-badSUSE:Linux Enterprise Server for SAP Applications 15 SP2 |
before 1.16.3-150200.4.16.1 | 1.16.3-150200.4.16.1 |
gstreamer-plugins-badSUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS From an advisory covering 2 CVEs |
before 1.16.3-150300.9.15.1 | 1.16.3-150300.9.15.1 |
gstreamer-plugins-badSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 2 CVEs |
before 1.16.3-150300.9.15.1 | 1.16.3-150300.9.15.1 |
gstreamer-plugins-badSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 2 CVEs |
before 1.16.3-150300.9.15.1 | 1.16.3-150300.9.15.1 |
gstreamer-plugins-badSUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 2 CVEs |
before 1.16.3-150300.9.15.1 | 1.16.3-150300.9.15.1 |
gstreamer-plugins-badSUSE:Enterprise Storage 7.1 From an advisory covering 2 CVEs |
before 1.16.3-150300.9.15.1 | 1.16.3-150300.9.15.1 |
gstreamer-plugins-badSUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 1.8.3-18.12.1 | 1.8.3-18.12.1 |
gstreamer-plugins-badSUSE:Linux Enterprise Server 12 SP5 |
before 1.8.3-18.12.1 | 1.8.3-18.12.1 |
gstreamer-plugins-badSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 1.8.3-18.12.1 | 1.8.3-18.12.1 |
gstreamer-plugins-badSUSE:Linux Enterprise Module for Basesystem 15 SP4 From an advisory covering 2 CVEs |
before 1.20.1-150400.3.15.1 | 1.20.1-150400.3.15.1 |
gstreamer-plugins-badSUSE:Linux Enterprise Module for Desktop Applications 15 SP4 From an advisory covering 2 CVEs |
before 1.20.1-150400.3.15.1 | 1.20.1-150400.3.15.1 |
gstreamer-plugins-badSUSE:Linux Enterprise Module for Package Hub 15 SP4 From an advisory covering 2 CVEs |
before 1.20.1-150400.3.15.1 | 1.20.1-150400.3.15.1 |
gstreamer-plugins-badSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 2 CVEs |
before 1.20.1-150400.3.15.1 | 1.20.1-150400.3.15.1 |
gstreamer-plugins-badSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 2 CVEs |
before 1.20.1-150400.3.15.1 | 1.20.1-150400.3.15.1 |
gstreamer-plugins-badSUSE:Linux Enterprise Real Time 15 SP4 From an advisory covering 2 CVEs |
before 1.20.1-150400.3.15.1 | 1.20.1-150400.3.15.1 |
gstreamer-plugins-badSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 2 CVEs |
before 1.20.1-150400.3.15.1 | 1.20.1-150400.3.15.1 |
gstreamer-plugins-badSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 2 CVEs |
before 1.20.1-150400.3.15.1 | 1.20.1-150400.3.15.1 |
gstreamer-plugins-badSUSE:Manager Proxy 4.3 From an advisory covering 2 CVEs |
before 1.20.1-150400.3.15.1 | 1.20.1-150400.3.15.1 |
gstreamer-plugins-badSUSE:Manager Server 4.3 From an advisory covering 2 CVEs |
before 1.20.1-150400.3.15.1 | 1.20.1-150400.3.15.1 |
gst-plugins-bad0.10Ubuntu:Pro:14.04:LTS |
All versions, plus listed versions 0.10.23-7ubuntu20.10.23-7.2ubuntu10.10.23-7.2ubuntu1.10.10.23-7.2ubuntu1.20.10.23-7.2ubuntu1.30.10.23-7.2ubuntu1.3+esm1 |
None known |
gst-plugins-bad1.0Ubuntu:Pro:14.04:LTS |
All versions, plus listed versions 1.2.0-3ubuntu51.2.1-1ubuntu11.2.1-1ubuntu21.2.2-1ubuntu11.2.2-1ubuntu2 Show 6 moreShow less1.2.2-1ubuntu41.2.3-1ubuntu11.2.3-1ubuntu21.2.4-1~ubuntu11.2.4-1~ubuntu1.11.2.4-1~ubuntu1.1+esm1 |
None known |
gst-plugins-bad1.0Ubuntu:Pro:16.04:LTS |
before 1.8.3-1ubuntu0.2+esm1, plus listed versions 1.6.0-1ubuntu11.6.1-1ubuntu11.6.2-1ubuntu11.7.1-1ubuntu11.7.1-1ubuntu3 Show 9 moreShow less1.7.1-1ubuntu41.7.2-1ubuntu11.7.90-1ubuntu21.7.91-1ubuntu11.8.0-1ubuntu11.8.1-1ubuntu0.11.8.2-1ubuntu0.11.8.2-1ubuntu0.21.8.3-1ubuntu0.2 |
1.8.3-1ubuntu0.2+esm1 |
gst-plugins-bad1.0Ubuntu:Pro:18.04:LTS |
before 1.14.5-0ubuntu1~18.04.1+esm1, plus listed versions 1.12.3-1ubuntu11.12.3-1ubuntu21.12.3-2ubuntu11.12.4-2ubuntu11.12.4-2ubuntu2 Show 6 moreShow less1.13.1-1ubuntu11.13.91-1ubuntu11.14.0-1ubuntu11.14.1-1ubuntu1~ubuntu18.04.11.14.4-1ubuntu1~ubuntu18.04.11.14.5-0ubuntu1~18.04.1 |
1.14.5-0ubuntu1~18.04.1+esm1 |
gst-plugins-bad1.0Ubuntu:20.04:LTS |
before 1.16.3-0ubuntu1.1, plus listed versions 1.16.1-1ubuntu11.16.1-1ubuntu31.16.1-1ubuntu41.16.1-1ubuntu51.16.1-1ubuntu6 Show 6 moreShow less1.16.1-1ubuntu81.16.2-1ubuntu11.16.2-1ubuntu21.16.2-2ubuntu11.16.2-2.1ubuntu11.16.3-0ubuntu1 |
1.16.3-0ubuntu1.1 |
gst-plugins-bad1.0Ubuntu:22.04:LTS |
before 1.20.3-0ubuntu1.1, plus listed versions 1.18.5-1ubuntu11.18.5-1ubuntu31.20.0-2ubuntu21.20.1-1ubuntu21.20.3-0ubuntu1 |
1.20.3-0ubuntu1.1 |
gst-plugins-bad1.0Ubuntu:20.04:LTS From an advisory covering 6 CVEs |
before 1.16.3-0ubuntu1.1, plus listed versions 1.16.1-1ubuntu11.16.1-1ubuntu31.16.1-1ubuntu41.16.1-1ubuntu51.16.1-1ubuntu6 Show 6 moreShow less1.16.1-1ubuntu81.16.2-1ubuntu11.16.2-1ubuntu21.16.2-2ubuntu11.16.2-2.1ubuntu11.16.3-0ubuntu1 |
1.16.3-0ubuntu1.1 |
gst-plugins-bad1.0Ubuntu:22.04:LTS From an advisory covering 6 CVEs |
before 1.20.3-0ubuntu1.1, plus listed versions 1.18.5-1ubuntu11.18.5-1ubuntu31.20.0-2ubuntu21.20.1-1ubuntu21.20.3-0ubuntu1 |
1.20.3-0ubuntu1.1 |
gstreamer-plugins-badopenSUSE:Leap 15.5 From an advisory covering 4 CVEs |
before 1.22.0-lp155.3.10.1 | 1.22.0-lp155.3.10.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected, aliases, references | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-40475 is a high vulnerability (CVSS 8.8) in Gstreamer, published September 28, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.10%, the 81st percentile. Fixed in gst-plugins-bad 1.22.7-r0.
References
zerodayinitiative.com/advisories/ZDI-23-1457
gstreamer.freedesktop.org/security/sa-2023-0007.html
lists.debian.org/debian-lts-announce/2023/10/msg00038.html
nvd.nist.gov/vuln/detail/CVE-2023-40475
github.com/advisories/GHSA-r6qp-3cmm-v7xj
security.alpinelinux.org/vuln/CVE-2023-40475
Show 65 moreShow less
access.redhat.com/errata/RHSA-2024:2287
bugzilla.redhat.com/2254587
errata.almalinux.org/9/ALSA-2024-2287.html
security-tracker.debian.org/tracker/CVE-2023-40475
advisories.mageia.org/MGASA-2023-0354.html
bugs.mageia.org/show_bug.cgi?id=32071
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1709
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2287.json
cve.org/CVERecord?id=CVE-2023-40474
errata.rockylinux.org/RLSA-2024:2287
suse.com/support/update/announcement/2023/suse-su-20234943-1
bugzilla.suse.com/1215792
ubuntu.com/security/CVE-2023-40475
gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/5362
lists.opensuse.org/archives/list/[email protected]/thread/73CSYYN6KCRAUIBATMXYYKQT4I5PVKDJ