Skip to contentGstreamer vulnerabilities
Newest
- gstreamerGHSL-2024-244: GStreamer has an OOB-read in FOURCC_SMI_ parsingCVE-2024-47596Fix available5.1 Medium
- gstreamerGHSL-2024-243: GStreamer has an integer underflow in extract_cc_from_data leading to OOB-readCVE-2024-47546Fix available6.9 Medium
- gstreamerGHSL-2024-242: GStreamer has an integer underflow in FOURCC_strf parsing leading to OOB-readCVE-2024-47545Fix available6.9 Medium
- gstreamerGHSL-2024-238: GStreamer has NULL-pointer dereferences in MP4/MOV demuxer CENC handlingCVE-2024-47544Fix available6.8 Medium
- gstreamerGHSL-2024-236: GStreamer has an OOB-read in qtdemux_parse_containerCVE-2024-47543Fix available5.1 Medium
- gstreamerGHSL-2024-197: GStreamer uses uninitialized stack memory in Matroska/WebM demuxerCVE-2024-47540Fix available8.6 High
- gstreamerGHSL-2024-195: GStreamer has an OOB-write in convert_to_s334_1aCVE-2024-47539Fix available8.6 High
- gstreamerGHSL-2024-094: GStreamer has an OOB-write in isomp4/qtdemux.cCVE-2024-47537Fix available8.6 High
- gstreamerGHSL-2024-263: Gstreamer NULL-pointer dereference in LRC subtitle parserCVE-2024-47835Fix available6.8 Medium
- gstreamerGHSL-2024-117: GStreamer has an out-of-bounds write in Ogg demuxerCVE-2024-47615Fix available8.6 High
- gstreamerGHSL-2024-116: Stack-buffer overflow in gst_opus_dec_parse_headerCVE-2024-47607Fix available8.6 High
- gstreamerGHSL-2024-248: GStreamer has an OOB-read in format_channel_maskCVE-2024-47600Fix available5.1 Medium
- gstreamerGHSL-2024-235: GStreamer ID3v2 parser out-of-bounds read and NULL-pointer dereferenceCVE-2024-47542Fix available6.8 Medium
- gstreamerGHSL-2024-228: GStreamer has an out-of-bounds write in SSA subtitle parserCVE-2024-47541Fix available6.9 Medium
- gstreamerGHSL-2024-115: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packetCVE-2024-47538Fix available8.6 High
- gstreamer orcStack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39....CVE-2024-40897Fix available6.7 Medium
- gstreamer, debian linux +1 moreGStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution VulnerabilityCVE-2024-4453Fix available7.8 High
- gstreamerGStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityCVE-2024-0444Fix available7.5 High
- gstreamerGStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityCVE-2023-50186Fix available7.5 High
- gstreamerGStreamer MXF File Parsing Use-After-Free Remote Code Execution VulnerabilityCVE-2023-44446Fix available8.8 High
- gstreamerGStreamer AV1 Codec Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityCVE-2023-44429Fix available8.8 High
- gstreamerGStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityCVE-2023-40476Fix available8.8 High
- gstreamerGStreamer MXF File Parsing Integer Overflow Remote Code Execution VulnerabilityCVE-2023-40475Fix available8.8 High
- gstreamerGStreamer MXF File Parsing Integer Overflow Remote Code Execution VulnerabilityCVE-2023-40474Fix available8.8 High
- gstreamerGStreamer RealMedia File Parsing Integer Overflow Remote Code Execution VulnerabilityCVE-2023-38104Fix available8.8 High
- gstreamerGStreamer RealMedia File Parsing Integer Overflow Remote Code Execution VulnerabilityCVE-2023-38103Fix available8.8 High
- gstreamerGStreamer SRT File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityCVE-2023-37329Fix available8.8 High
- gstreamerGStreamer PGS File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityCVE-2023-37328Fix available8.8 High
- gstreamerGStreamer FLAC File Parsing Integer Overflow Remote Code Execution VulnerabilityCVE-2023-37327Fix available7.6 High
- debian linux, gstreamer +1 moreDOS / potential heap overwrite in qtdemux using zlib decompression. Integer overflow in qtdemux...CVE-2022-2122Fix available7.8 High
- debian linux, gstreamer +1 moreDOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow...CVE-2022-1925Fix available7.8 High
- debian linux, gstreamer +1 moreDOS / potential heap overwrite in mkv demuxing using lzo decompression. Integer overflow in...CVE-2022-1924Fix available7.8 High
- debian linux, gstreamer +1 moreDOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in...CVE-2022-1923Fix available7.8 High
- debian linux, gstreamer +1 moreDOS / potential heap overwrite in mkv demuxing using zlib decompression. Integer overflow in...CVE-2022-1922Fix available7.8 High
- debian linux, gstreamer +1 moreInteger overflow in avidemux element in gst_avi_demux_invert function which allows a heap...CVE-2022-1921Fix available7.8 High
- debian linux, gstreamer +1 moreInteger overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which...CVE-2022-1920Fix available7.8 High
- gstreamer, netapp active iq unified manager, e-series santricity os controller +9 more +11 moreGStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.CVE-2021-3522Fix available5.5 Medium
- gstreamer, debian linux, redhat enterprise linux +2 moreGStreamer before 1.18.4 might cause heap corruption when parsing certain malformed Matroska files.CVE-2021-3498Fix available7.8 High
- gstreamer, debian linux, redhat enterprise linux +2 moreGStreamer before 1.18.4 might access already-freed memory in error code paths when demuxing...CVE-2021-3497Fix available7.8 High
- freedesktop gst-plugins-bad, gstreamer +1 moreA flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when...CVE-2021-3185Fix available9.8 Critical
- gstreamer, gstreamer project gst-rtsp-server, opensuse backports sle +1 more +3 moreAn exploitable denial of service vulnerability exists in the GstRTSPAuth functionality of...CVE-2020-6095Fix available7.5 High
- gstreamer, canonical ubuntu linux, debian linux +2 moreGStreamer before 1.16.0 has a heap-based buffer overflow in the RTSP connection parser via a...CVE-2019-9928Fix available8.8 High
- gstreamer, debian linux, redhat enterprise linux desktop +5 more +7 moreThe gst_ps_demux_parse_psm function in gst/mpegdemux/gstmpegdemux.c in gst-plugins-bad in...CVE-2017-5848Fix available7.5 High
- gstreamer, debian linux +1 moreThe gst_asf_demux_process_ext_content_desc function in gst/asfdemux/gstasfdemux.c in gst-plugins...CVE-2017-5847Fix available7.5 High
- gstreamerThe gst_asf_demux_process_ext_stream_props function in gst/asfdemux/gstasfdemux.c in gst-plugins...CVE-2017-5846Fix available5.5 Medium
- gstreamerMultiple use-after-free vulnerabilities in the (1) gst_mini_object_unref, (2) gst_tag_list_unref,...CVE-2017-5843Fix available7.5 High
- gstreamerThe gst_date_time_new_from_iso8601_string function in gst/gstdatetime.c in GStreamer before 1.10...CVE-2017-5838Fix available7.5 High
- gstreamerThe gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer...CVE-2017-5845Fix available7.5 High
- gstreamerThe gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in...CVE-2017-5844Fix available5.5 Medium
- gstreamerThe html_context_handle_element function in gst/subparse/samiparse.c in gst-plugins-base in...CVE-2017-5842Fix available5.5 Medium
- Show moreLoading…