CVE-2023-40476
GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.
The specific flaw exists within the parsing of H265 encoded video files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-21768.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.
The specific flaw exists within the parsing of H265 encoded video files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-21768.
- Record
CVE-2023-40476- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-121
- Updated
- 2026-11-02
EUVDEUVD-2023-45047
GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.
The specific flaw exists within the parsing of H265 encoded video files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-21768.
- Record
EUVD-2023-45047- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-jh94-w345-vcxj
GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This...
GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.
The specific flaw exists within the parsing of H265 encoded video files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21768.
- Record
GHSA-jh94-w345-vcxj- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-121
- Updated
- 2026-11-02
NVD
GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.
The specific flaw exists within the parsing of H265 encoded video files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-21768.
- Record
CVE-2023-40476- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-121
- Updated
- 2026-11-02
OSVALPINE-CVE-2023-40476
GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.
The specific flaw exists within the parsing of H265 encoded video files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-21768.
- Record
ALPINE-CVE-2023-40476- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSV
GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.
The specific flaw exists within the parsing of H265 encoded video files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-21768.
- Record
CVE-2023-40476- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-121
- Updated
- 2026-11-02
Show 19 moreShow less
OSVDEBIAN-CVE-2023-40476
GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of H265 encoded video files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-21768.
- Record
DEBIAN-CVE-2023-40476- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2023-1709
gstreamer1-plugins-bad-free security update
GStreamer is a pipeline-based multi media framework that links together a wide variety of media processing systems to complete complex workflows, based on graphs of filters which operate on media data. This package contains plug-ins that are not tested well enough yet, or the code is not of good enough quality.
Security Fix(es):
VUL-0: CVE-2023-40474: gstreamer-plugins-bad: GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability(CVE-2023-40474)
VUL-0: CVE-2023-40475: gstreamer-plugins-bad: GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability(CVE-2023-40475)
VUL-0: CVE-2023-40476: gstreamer-plugins-bad: GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability(CVE-2023-40476)
- Record
OESA-2023-1709- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2024:2287
Red Hat Security Advisory: gstreamer1-plugins-bad-free security update
- Record
RHSA-2024:2287- CVSS 3.1
- 6.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2024:3060
Red Hat Security Advisory: gstreamer1-plugins-bad-free security update
- Record
RHSA-2024:3060- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-40476
GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of H265 encoded video files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-21768.
- Record
UBUNTU-CVE-2023-40476- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVALSA-2024:2287 No score
Moderate: gstreamer1-plugins-bad-free security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.
Security Fix(es):
- gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with uncompressed video (CVE-2023-40474)
- gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with AES3 audio (CVE-2023-40475)
- gstreamer-plugins-bad: Integer overflow in H.265 video parser leading to stack overwrite (CVE-2023-40476)
- gstreamer-plugins-bad-free: buffer overflow vulnerability (CVE-2023-50186)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
- Record
ALSA-2024:2287- Updated
- 2026-11-02
OSVALSA-2024:3060 No score
Moderate: gstreamer1-plugins-bad-free security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.
Security Fix(es):
- gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with uncompressed video (CVE-2023-40474)
- gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with AES3 audio (CVE-2023-40475)
- gstreamer-plugins-bad: Integer overflow in H.265 video parser leading to stack overwrite (CVE-2023-40476)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
- Record
ALSA-2024:3060- Updated
- 2026-11-02
OSVMGASA-2023-0354 No score
Updated gstreamer packages fix many security vulnerabilities
Updated gstreamer packages fix many security issues (see the references below). Apart from the listed CVEs, ZDI-CAN-22300 is also fixed.
- Record
MGASA-2023-0354- Updated
- 2026-11-02
OSVopenSUSE-SU-2023:0409-1 No score
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues:
- CVE-2023-40474: Fixed integer overflow causing out of bounds writes when handling invalid uncompressed video (bsc#1215796).
- CVE-2023-40476: Fixed possible overflow using max_sub_layers_minus1 (bsc#1215793).
- Record
openSUSE-SU-2023:0409-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:13396-1 No score
gstreamer-plugins-bad-1.22.6-2.1 on GA media
These are all security issues fixed in the gstreamer-plugins-bad-1.22.6-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:13396-1- Updated
- 2026-11-02
OSVRLSA-2024:2287 No score
Moderate: gstreamer1-plugins-bad-free security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.
Security Fix(es):
-
gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with uncompressed video (CVE-2023-40474)
-
gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with AES3 audio (CVE-2023-40475)
-
gstreamer-plugins-bad: Integer overflow in H.265 video parser leading to stack overwrite (CVE-2023-40476)
-
gstreamer-plugins-bad-free: buffer overflow vulnerability (CVE-2023-50186)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.
- Record
RLSA-2024:2287- Updated
- 2026-11-02
OSVRLSA-2024:3060 No score
Moderate: gstreamer1-plugins-bad-free security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.
Security Fix(es):
-
gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with uncompressed video (CVE-2023-40474)
-
gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with AES3 audio (CVE-2023-40475)
-
gstreamer-plugins-bad: Integer overflow in H.265 video parser leading to stack overwrite (CVE-2023-40476)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section.
- Record
RLSA-2024:3060- Updated
- 2026-11-02
OSVSUSE-SU-2023:4574-1 No score
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues:
- CVE-2023-40474: Fixed integer overflow causing out of bounds writes when handling invalid uncompressed video (bsc#1215796).
- CVE-2023-40476: Fixed possible overflow using max_sub_layers_minus1 (bsc#1215793).
- Record
SUSE-SU-2023:4574-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:4575-1 No score
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues:
- CVE-2023-40474: Fixed integer overflow causing out of bounds writes when handling invalid uncompressed video (bsc#1215796).
- CVE-2023-40476: Fixed possible overflow using max_sub_layers_minus1 (bsc#1215793).
- Record
SUSE-SU-2023:4575-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:4594-1 No score
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues:
- CVE-2023-40474: Fixed integer overflow causing out of bounds writes when handling invalid uncompressed video (bsc#1215796).
- CVE-2023-40476: Fixed possible overflow using max_sub_layers_minus1 (bsc#1215793).
- Record
SUSE-SU-2023:4594-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:4595-1 No score
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues:
- CVE-2023-40474: Fixed integer overflow causing out of bounds writes when handling invalid uncompressed video (bsc#1215796).
- CVE-2023-40476: Fixed possible overflow using max_sub_layers_minus1 (bsc#1215793).
- Record
SUSE-SU-2023:4595-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:4596-1 No score
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues:
- CVE-2023-40474: Fixed integer overflow causing out of bounds writes when handling invalid uncompressed video (bsc#1215796).
- CVE-2023-40476: Fixed possible overflow using max_sub_layers_minus1 (bsc#1215793).
- Record
SUSE-SU-2023:4596-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:4597-1 No score
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues:
- CVE-2023-40474: Fixed integer overflow causing out of bounds writes when handling invalid uncompressed video (bsc#1215796).
- CVE-2023-40476: Fixed possible overflow using max_sub_layers_minus1 (bsc#1215793).
- Record
SUSE-SU-2023:4597-1- Updated
- 2026-11-02
OSVUSN-6526-1 No score
gst-plugins-bad1.0 vulnerabilities
It was discovered that GStreamer Bad Plugins incorrectly handled certain media files. A remote attacker could use this issue to cause GStreamer Bad Plugins to crash, resulting in a denial of service, or possibly execute arbitrary code.
- Record
USN-6526-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gst-plugins-badAlpine:v3.18 |
before 1.22.7-r0 | 1.22.7-r0 |
gst-plugins-badAlpine:v3.19 |
before 1.22.6-r0 | 1.22.6-r0 |
gst-plugins-badAlpine:v3.20 |
before 1.22.6-r0 | 1.22.6-r0 |
gst-plugins-badAlpine:v3.21 |
before 1.22.6-r0 | 1.22.6-r0 |
gst-plugins-badAlpine:v3.22 |
before 1.22.6-r0 | 1.22.6-r0 |
gst-plugins-badAlpine:v3.23 |
before 1.22.6-r0 | 1.22.6-r0 |
gst-plugins-badAlpine:v3.24 |
before 1.22.6-r0 | 1.22.6-r0 |
gstreamer1-plugins-bad-freeAlmaLinux:9 From an advisory covering 4 CVEs |
before 1.22.1-4.el9 | 1.22.1-4.el9 |
gstreamer1-plugins-bad-free-develAlmaLinux:9 From an advisory covering 4 CVEs |
before 1.22.1-4.el9 | 1.22.1-4.el9 |
gstreamer1-plugins-bad-freeAlmaLinux:8 From an advisory covering 3 CVEs |
before 1.16.1-4.el8 | 1.16.1-4.el8 |
Show 69 moreShow less
| Package | Affected | Fixed |
|---|---|---|
gstreamer1-plugins-bad-free-develAlmaLinux:8 From an advisory covering 3 CVEs |
before 1.16.1-4.el8 | 1.16.1-4.el8 |
gst-plugins-bad1.0Debian:12 |
before 1.22.0-4+deb12u2, plus listed versions 1.22.0-41.22.0-4+deb12u1 |
1.22.0-4+deb12u2 |
gst-plugins-bad1.0Debian:13 |
before 1.22.7-1 | 1.22.7-1 |
gst-plugins-bad1.0Debian:14 |
before 1.22.7-1 | 1.22.7-1 |
gst-plugins-bad1.0Debian:10 From an advisory covering 3 CVEs |
before 1.14.4-1+deb10u4, plus listed versions 1.14.4-11.14.4-1+deb10u11.14.4-1+deb10u21.14.4-1+deb10u31.14.4-1deb10u1 |
1.14.4-1+deb10u4 |
gst-plugins-bad1.0Debian:11 From an advisory covering 3 CVEs |
before 1.18.4-3+deb11u2, plus listed versions 1.18.4-31.18.4-3+deb11u1 |
1.18.4-3+deb11u2 |
gst-plugins-bad1.0Debian:12 From an advisory covering 3 CVEs |
before 1.22.0-4+deb12u2, plus listed versions 1.22.0-41.22.0-4+deb12u1 |
1.22.0-4+deb12u2 |
gstreamer1.0Mageia:9 From an advisory covering 16 CVEs |
before 1.22.8-1.mga9 | 1.22.8-1.mga9 |
gstreamer1.0-plugins-baseMageia:9 From an advisory covering 16 CVEs |
before 1.22.8-1.mga9 | 1.22.8-1.mga9 |
gstreamer1.0-omxMageia:9 From an advisory covering 16 CVEs |
before 1.22.8-1.mga9 | 1.22.8-1.mga9 |
gstreamer1.0-pythonMageia:9 From an advisory covering 16 CVEs |
before 1.22.8-1.mga9 | 1.22.8-1.mga9 |
gstreamer1.0-plugins-goodMageia:9 From an advisory covering 16 CVEs |
before 1.22.8-1.mga9 | 1.22.8-1.mga9 |
gstreamer1.0-plugins-badMageia:9 From an advisory covering 16 CVEs |
before 1.22.8-1.mga9 | 1.22.8-1.mga9 |
gstreamer1.0-plugins-uglyMageia:9 From an advisory covering 16 CVEs |
before 1.22.8-1.mga9 | 1.22.8-1.mga9 |
gstreamer1.0-rtsp-serverMageia:9 From an advisory covering 16 CVEs |
before 1.22.8-1.mga9 | 1.22.8-1.mga9 |
gstreamer1.0-vaapiMageia:9 From an advisory covering 16 CVEs |
before 1.22.8-1.mga9 | 1.22.8-1.mga9 |
gstreamer1.0-devtoolsMageia:9 From an advisory covering 16 CVEs |
before 1.22.8-1.mga9 | 1.22.8-1.mga9 |
gstreamer1.0-libavMageia:9 From an advisory covering 16 CVEs |
before 1.22.8-1.mga9 | 1.22.8-1.mga9 |
gstreamer1.0-moodbarMageia:9 From an advisory covering 16 CVEs |
before 1.2.1-5.mga9 | 1.2.1-5.mga9 |
gstreamer1.0-editing-servicesMageia:9 From an advisory covering 16 CVEs |
before 1.22.8-1.mga9 | 1.22.8-1.mga9 |
gstreamer1.0-plugins-badMageia:9 From an advisory covering 16 CVEs |
before 1.22.8-1.mga9.tainted | 1.22.8-1.mga9.tainted |
gstreamer1.0-plugins-uglyMageia:9 From an advisory covering 16 CVEs |
before 1.22.8-1.mga9.tainted | 1.22.8-1.mga9.tainted |
gstreamer1-plugins-bad-freeopenEuler:20.03-LTS-SP1 From an advisory covering 3 CVEs |
before 1.16.2-3.oe1 | 1.16.2-3.oe1 |
gstreamer1-plugins-bad-freeopenEuler:20.03-LTS-SP3 From an advisory covering 3 CVEs |
before 1.16.2-3.oe1 | 1.16.2-3.oe1 |
gstreamer1-plugins-bad-freeopenEuler:22.03-LTS From an advisory covering 3 CVEs |
before 1.16.2-6.oe2203sp2 | 1.16.2-6.oe2203sp2 |
gstreamer1-plugins-bad-freeopenEuler:22.03-LTS-SP1 From an advisory covering 3 CVEs |
before 1.16.2-6.oe2203sp1 | 1.16.2-6.oe2203sp1 |
gstreamer1-plugins-bad-freeopenEuler:22.03-LTS-SP2 From an advisory covering 3 CVEs |
before 1.16.2-6.oe2203sp2 | 1.16.2-6.oe2203sp2 |
gstreamer1-plugins-bad-freeRed Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs |
before 0:1.22.1-4.el9 | 0:1.22.1-4.el9 |
gstreamer1-plugins-bad-free-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs |
before 0:1.22.1-4.el9 | 0:1.22.1-4.el9 |
gstreamer1-plugins-bad-free-debugsourceRed Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs |
before 0:1.22.1-4.el9 | 0:1.22.1-4.el9 |
gstreamer1-plugins-bad-free-debuginfoRed Hat:enterprise_linux:9::crb From an advisory covering 4 CVEs |
before 0:1.22.1-4.el9 | 0:1.22.1-4.el9 |
gstreamer1-plugins-bad-free-debugsourceRed Hat:enterprise_linux:9::crb From an advisory covering 4 CVEs |
before 0:1.22.1-4.el9 | 0:1.22.1-4.el9 |
gstreamer1-plugins-bad-free-develRed Hat:enterprise_linux:9::crb From an advisory covering 4 CVEs |
before 0:1.22.1-4.el9 | 0:1.22.1-4.el9 |
gstreamer1-plugins-bad-freeRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-4.el8 | 0:1.16.1-4.el8 |
gstreamer1-plugins-bad-free-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-4.el8 | 0:1.16.1-4.el8 |
gstreamer1-plugins-bad-free-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:1.16.1-4.el8 | 0:1.16.1-4.el8 |
gstreamer1-plugins-bad-free-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:1.16.1-4.el8 | 0:1.16.1-4.el8 |
gstreamer1-plugins-bad-free-debugsourceRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:1.16.1-4.el8 | 0:1.16.1-4.el8 |
gstreamer1-plugins-bad-free-develRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:1.16.1-4.el8 | 0:1.16.1-4.el8 |
gstreamer1-plugins-bad-freeRocky Linux:9 From an advisory covering 4 CVEs |
before 0:1.22.1-4.el9 | 0:1.22.1-4.el9 |
gstreamer1-plugins-bad-freeRocky Linux:8 From an advisory covering 3 CVEs |
before 0:1.16.1-4.el8 | 0:1.16.1-4.el8 |
gstreamer-plugins-badSUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 2 CVEs |
before 1.22.0-150500.3.9.1 | 1.22.0-150500.3.9.1 |
gstreamer-plugins-badSUSE:Linux Enterprise Module for Desktop Applications 15 SP5 From an advisory covering 2 CVEs |
before 1.22.0-150500.3.9.1 | 1.22.0-150500.3.9.1 |
gstreamer-plugins-badSUSE:Linux Enterprise Module for Package Hub 15 SP5 From an advisory covering 2 CVEs |
before 1.22.0-150500.3.9.1 | 1.22.0-150500.3.9.1 |
gstreamer-plugins-badSUSE:Linux Enterprise Module for Basesystem 15 SP4 From an advisory covering 2 CVEs |
before 1.20.1-150400.3.9.1 | 1.20.1-150400.3.9.1 |
gstreamer-plugins-badSUSE:Linux Enterprise Module for Desktop Applications 15 SP4 From an advisory covering 2 CVEs |
before 1.20.1-150400.3.9.1 | 1.20.1-150400.3.9.1 |
gstreamer-plugins-badSUSE:Linux Enterprise Module for Package Hub 15 SP4 From an advisory covering 2 CVEs |
before 1.20.1-150400.3.9.1 | 1.20.1-150400.3.9.1 |
gstreamer-plugins-badSUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS From an advisory covering 2 CVEs |
before 1.16.3-150300.9.12.2 | 1.16.3-150300.9.12.2 |
gstreamer-plugins-badSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 2 CVEs |
before 1.16.3-150300.9.12.2 | 1.16.3-150300.9.12.2 |
gstreamer-plugins-badSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 2 CVEs |
before 1.16.3-150300.9.12.2 | 1.16.3-150300.9.12.2 |
gstreamer-plugins-badSUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 2 CVEs |
before 1.16.3-150300.9.12.2 | 1.16.3-150300.9.12.2 |
gstreamer-plugins-badSUSE:Enterprise Storage 7.1 From an advisory covering 2 CVEs |
before 1.16.3-150300.9.12.2 | 1.16.3-150300.9.12.2 |
gstreamer-plugins-badSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 2 CVEs |
before 1.16.3-150200.4.13.2 | 1.16.3-150200.4.13.2 |
gstreamer-plugins-badSUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 2 CVEs |
before 1.16.3-150200.4.13.2 | 1.16.3-150200.4.13.2 |
gstreamer-plugins-badSUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 2 CVEs |
before 1.16.3-150200.4.13.2 | 1.16.3-150200.4.13.2 |
gstreamer-plugins-badSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 2 CVEs |
before 1.12.5-150000.3.15.1 | 1.12.5-150000.3.15.1 |
gstreamer-plugins-badSUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 2 CVEs |
before 1.12.5-150000.3.15.1 | 1.12.5-150000.3.15.1 |
gstreamer-plugins-badSUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 2 CVEs |
before 1.12.5-150000.3.15.1 | 1.12.5-150000.3.15.1 |
gstreamer-plugins-badSUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 2 CVEs |
before 1.8.3-18.9.3 | 1.8.3-18.9.3 |
gstreamer-plugins-badSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 2 CVEs |
before 1.8.3-18.9.3 | 1.8.3-18.9.3 |
gstreamer-plugins-badSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 2 CVEs |
before 1.8.3-18.9.3 | 1.8.3-18.9.3 |
gst-plugins-bad1.0Ubuntu:Pro:16.04:LTS |
before 1.8.3-1ubuntu0.2+esm1, plus listed versions 1.6.0-1ubuntu11.6.1-1ubuntu11.6.2-1ubuntu11.7.1-1ubuntu11.7.1-1ubuntu3 Show 9 moreShow less1.7.1-1ubuntu41.7.2-1ubuntu11.7.90-1ubuntu21.7.91-1ubuntu11.8.0-1ubuntu11.8.1-1ubuntu0.11.8.2-1ubuntu0.11.8.2-1ubuntu0.21.8.3-1ubuntu0.2 |
1.8.3-1ubuntu0.2+esm1 |
gst-plugins-bad1.0Ubuntu:Pro:18.04:LTS |
before 1.14.5-0ubuntu1~18.04.1+esm1, plus listed versions 1.12.3-1ubuntu11.12.3-1ubuntu21.12.3-2ubuntu11.12.4-2ubuntu11.12.4-2ubuntu2 Show 6 moreShow less1.13.1-1ubuntu11.13.91-1ubuntu11.14.0-1ubuntu11.14.1-1ubuntu1~ubuntu18.04.11.14.4-1ubuntu1~ubuntu18.04.11.14.5-0ubuntu1~18.04.1 |
1.14.5-0ubuntu1~18.04.1+esm1 |
gst-plugins-bad1.0Ubuntu:20.04:LTS |
before 1.16.3-0ubuntu1.1, plus listed versions 1.16.1-1ubuntu11.16.1-1ubuntu31.16.1-1ubuntu41.16.1-1ubuntu51.16.1-1ubuntu6 Show 6 moreShow less1.16.1-1ubuntu81.16.2-1ubuntu11.16.2-1ubuntu21.16.2-2ubuntu11.16.2-2.1ubuntu11.16.3-0ubuntu1 |
1.16.3-0ubuntu1.1 |
gst-plugins-bad1.0Ubuntu:22.04:LTS |
before 1.20.3-0ubuntu1.1, plus listed versions 1.18.5-1ubuntu11.18.5-1ubuntu31.20.0-2ubuntu21.20.1-1ubuntu21.20.3-0ubuntu1 |
1.20.3-0ubuntu1.1 |
gst-plugins-bad1.0Ubuntu:20.04:LTS From an advisory covering 6 CVEs |
before 1.16.3-0ubuntu1.1, plus listed versions 1.16.1-1ubuntu11.16.1-1ubuntu31.16.1-1ubuntu41.16.1-1ubuntu51.16.1-1ubuntu6 Show 6 moreShow less1.16.1-1ubuntu81.16.2-1ubuntu11.16.2-1ubuntu21.16.2-2ubuntu11.16.2-2.1ubuntu11.16.3-0ubuntu1 |
1.16.3-0ubuntu1.1 |
gst-plugins-bad1.0Ubuntu:22.04:LTS From an advisory covering 6 CVEs |
before 1.20.3-0ubuntu1.1, plus listed versions 1.18.5-1ubuntu11.18.5-1ubuntu31.20.0-2ubuntu21.20.1-1ubuntu21.20.3-0ubuntu1 |
1.20.3-0ubuntu1.1 |
gstreamer-plugins-badopenSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 1.22.0-lp155.3.7.1 | 1.22.0-lp155.3.7.1 |
gstreamer-plugins-badopenSUSE:Leap 15.5 From an advisory covering 2 CVEs |
before 1.22.0-lp155.3.7.1 | 1.22.0-lp155.3.7.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected, aliases, references | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-40476 is a high vulnerability (CVSS 8.8) in Gstreamer, published September 28, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.26%, the 83rd percentile. Fixed in gst-plugins-bad 1.22.7-r0.
References
zerodayinitiative.com/advisories/ZDI-23-1458
gstreamer.freedesktop.org/security/sa-2023-0008.html
lists.debian.org/debian-lts-announce/2023/10/msg00038.html
nvd.nist.gov/vuln/detail/CVE-2023-40476
github.com/advisories/GHSA-jh94-w345-vcxj
security.alpinelinux.org/vuln/CVE-2023-40476
Show 58 moreShow less
access.redhat.com/errata/RHSA-2024:2287
bugzilla.redhat.com/2254587
errata.almalinux.org/9/ALSA-2024-2287.html
security-tracker.debian.org/tracker/CVE-2023-40476
advisories.mageia.org/MGASA-2023-0354.html
bugs.mageia.org/show_bug.cgi?id=32071
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1709
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2287.json
cve.org/CVERecord?id=CVE-2023-40474
errata.rockylinux.org/RLSA-2024:2287
suse.com/support/update/announcement/2023/suse-su-20234574-1
bugzilla.suse.com/1215793
ubuntu.com/security/CVE-2023-40476
gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/5364
lists.opensuse.org/archives/list/[email protected]/thread/NYQ73JMQYKYFAPDQHXO3OANFFF6OOUL6