Gstreamer vulnerabilities
70 CVEs and advisories name Gstreamer as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-73473Gstreamer1-plugins-good: gstreamer: missing subindex entry count validation in avidemux leading to denial of service
- CVE-2026-73472Gstreamer1-plugins-good: gstreamer: integer overflow in avidemux superindex/subindex parsing leading to out-of-bounds read
- CVE-2026-73471Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux nikon metadata tag parsing
- CVE-2026-111183GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2026-18299GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability
- CVE-2026-18298GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2026-18297GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2026-18296GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2026-18295GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2026-73433Gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux fujifilm strd parsing leading to out-of-bounds read/write
- CVE-2026-73434Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing
- CVE-2026-5056GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2026-46470An issue was discovered in GStreamer gst-plugins-good before 1.28.2.
- CVE-2026-46469An issue was discovered in GStreamer gst-plugins-good before 1.28.2.
- CVE-2026-3084GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability
- CVE-2026-2921GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability
- CVE-2026-3083GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2026-3086GStreamer H.266 Codec Parser Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2026-3085GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2026-3082GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2026-3081GStreamer H.266 Codec Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2026-2923GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2026-2922GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2026-2920GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2025-6663GStreamer H266 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2025-2759GStreamer Incorrect Permission Assignment Local Privilege Escalation Vulnerability
- CVE-2025-3887GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-47834GHSL-2024-280: Gstreamer Use-After-Free read in Matroska CodecPrivate
- CVE-2024-47835GHSL-2024-263: Gstreamer NULL-pointer dereference in LRC subtitle parser
- CVE-2024-47778GHSL-2024-258: GStreamer has an OOB-read in gst_wavparse_adtl_chunk