# cve.now: Gstreamer

The newest entries naming Gstreamer as an affected vendor (up to 200), of 70 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-73473](https://cve.now/CVE-2026-73473.md): Gstreamer1-plugins-good: gstreamer: missing subindex entry count validation in avidemux leading to denial of service (CVSS 5.5)
- [CVE-2026-73472](https://cve.now/CVE-2026-73472.md): Gstreamer1-plugins-good: gstreamer: integer overflow in avidemux superindex/subindex parsing leading to out-of-bounds read (CVSS 6.1)
- [CVE-2026-73471](https://cve.now/CVE-2026-73471.md): Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux nikon metadata tag parsing (CVSS 6.1)
- [CVE-2026-111183](https://cve.now/CVE-2026-111183.md): GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 9.8)
- [CVE-2026-18299](https://cve.now/CVE-2026-18299.md): GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2026-18298](https://cve.now/CVE-2026-18298.md): GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2026-18297](https://cve.now/CVE-2026-18297.md): GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2026-18296](https://cve.now/CVE-2026-18296.md): GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2026-18295](https://cve.now/CVE-2026-18295.md): GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2026-73433](https://cve.now/CVE-2026-73433.md): Gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux fujifilm strd parsing leading to out-of-bounds read/write (CVSS 6.6)
- [CVE-2026-73434](https://cve.now/CVE-2026-73434.md): Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing (CVSS 6.1)
- [CVE-2026-5056](https://cve.now/CVE-2026-5056.md): GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2026-46470](https://cve.now/CVE-2026-46470.md): An issue was discovered in GStreamer gst-plugins-good before 1.28.2. (CVSS 4.0)
- [CVE-2026-46469](https://cve.now/CVE-2026-46469.md): An issue was discovered in GStreamer gst-plugins-good before 1.28.2. (CVSS 4.0)
- [CVE-2026-3084](https://cve.now/CVE-2026-3084.md): GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2026-2921](https://cve.now/CVE-2026-2921.md): GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2026-3083](https://cve.now/CVE-2026-3083.md): GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2026-3086](https://cve.now/CVE-2026-3086.md): GStreamer H.266 Codec Parser Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2026-3085](https://cve.now/CVE-2026-3085.md): GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2026-3082](https://cve.now/CVE-2026-3082.md): GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2026-3081](https://cve.now/CVE-2026-3081.md): GStreamer H.266 Codec Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2026-2923](https://cve.now/CVE-2026-2923.md): GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2026-2922](https://cve.now/CVE-2026-2922.md): GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2026-2920](https://cve.now/CVE-2026-2920.md): GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2025-6663](https://cve.now/CVE-2025-6663.md): GStreamer H266 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2025-2759](https://cve.now/CVE-2025-2759.md): GStreamer Incorrect Permission Assignment Local Privilege Escalation Vulnerability (CVSS 7.0)
- [CVE-2025-3887](https://cve.now/CVE-2025-3887.md): GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2024-47834](https://cve.now/CVE-2024-47834.md): GHSL-2024-280: Gstreamer Use-After-Free read in Matroska CodecPrivate (CVSS 5.1)
- [CVE-2024-47835](https://cve.now/CVE-2024-47835.md): GHSL-2024-263: Gstreamer NULL-pointer dereference in LRC subtitle parser (CVSS 6.8)
- [CVE-2024-47778](https://cve.now/CVE-2024-47778.md): GHSL-2024-258: GStreamer has an OOB-read in gst\_wavparse\_adtl\_chunk (CVSS 5.1)
- [CVE-2024-47777](https://cve.now/CVE-2024-47777.md): GHSL-2024-259: GStreamer has an OOB-read in gst\_wavparse\_smpl\_chunk (CVSS 5.1)
- [CVE-2024-47776](https://cve.now/CVE-2024-47776.md): GHSL-2024-260: GStreamer has a OOB-read in gst\_wavparse\_cue\_chunk (CVSS 5.1)
- [CVE-2024-47775](https://cve.now/CVE-2024-47775.md): GHSL-2024-261: GStreamer has an OOB-read in parse\_ds64 (CVSS 5.1)
- [CVE-2024-47774](https://cve.now/CVE-2024-47774.md): GHSL-2024-262: GStreamer has an OOB-read in gst\_avi\_subtitle\_parse\_gab2\_chunk (CVSS 5.1)
- [CVE-2024-47613](https://cve.now/CVE-2024-47613.md): GHSL-2024-118: GStreamer has a null pointer dereference in gst\_gdk\_pixbuf\_dec\_flush (CVSS 8.6)
- [CVE-2024-47615](https://cve.now/CVE-2024-47615.md): GHSL-2024-117: GStreamer has an out-of-bounds write in Ogg demuxer (CVSS 8.6)
- [CVE-2024-47607](https://cve.now/CVE-2024-47607.md): GHSL-2024-116: Stack-buffer overflow in gst\_opus\_dec\_parse\_header (CVSS 8.6)
- [CVE-2024-47606](https://cve.now/CVE-2024-47606.md): GHSL-2024-166: GStreamer Integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes (CVSS 8.6)
- [CVE-2024-47603](https://cve.now/CVE-2024-47603.md): GHSL-2024-251: GStreamer NULL-pointer dereference in Matroska/WebM demuxer (CVSS 6.8)
- [CVE-2024-47602](https://cve.now/CVE-2024-47602.md): GHSL-2024-250: Streamer NULL-pointer dereferences and out-of-bounds reads in Matroska/WebM demuxer (CVSS 6.8)
- [CVE-2024-47601](https://cve.now/CVE-2024-47601.md): GHSL-2024-249: GStreamer has a NULL-pointer dereference in Matroska/WebM demuxer (CVSS 6.8)
- [CVE-2024-47600](https://cve.now/CVE-2024-47600.md): GHSL-2024-248: GStreamer has an OOB-read in format\_channel\_mask (CVSS 5.1)
- [CVE-2024-47599](https://cve.now/CVE-2024-47599.md): GHSL-2024-247: GStreamer Insufficient error handling in JPEG decoder that can lead to NULL-pointer dereferences (CVSS 6.8)
- [CVE-2024-47598](https://cve.now/CVE-2024-47598.md): GHSL-2024-246: GStreamer has an OOB-read in qtdemux\_merge\_sample\_table (CVSS 5.1)
- [CVE-2024-47597](https://cve.now/CVE-2024-47597.md): GHSL-2024-245: GStreamer has an OOB-read in qtdemux\_parse\_samples (CVSS 5.1)
- [CVE-2024-47596](https://cve.now/CVE-2024-47596.md): GHSL-2024-244: GStreamer has an OOB-read in FOURCC\_SMI\_ parsing (CVSS 5.1)
- [CVE-2024-47546](https://cve.now/CVE-2024-47546.md): GHSL-2024-243: GStreamer has an integer underflow in extract\_cc\_from\_data leading to OOB-read (CVSS 6.9)
- [CVE-2024-47545](https://cve.now/CVE-2024-47545.md): GHSL-2024-242: GStreamer has an integer underflow in FOURCC\_strf parsing leading to OOB-read (CVSS 6.9)
- [CVE-2024-47544](https://cve.now/CVE-2024-47544.md): GHSL-2024-238: GStreamer has NULL-pointer dereferences in MP4/MOV demuxer CENC handling (CVSS 6.8)
- [CVE-2024-47543](https://cve.now/CVE-2024-47543.md): GHSL-2024-236: GStreamer has an OOB-read in qtdemux\_parse\_container (CVSS 5.1)
- [CVE-2024-47542](https://cve.now/CVE-2024-47542.md): GHSL-2024-235: GStreamer ID3v2 parser out-of-bounds read and NULL-pointer dereference (CVSS 6.8)
- [CVE-2024-47541](https://cve.now/CVE-2024-47541.md): GHSL-2024-228: GStreamer has an out-of-bounds write in SSA subtitle parser (CVSS 6.9)
- [CVE-2024-47540](https://cve.now/CVE-2024-47540.md): GHSL-2024-197: GStreamer uses uninitialized stack memory in Matroska/WebM demuxer (CVSS 8.6)
- [CVE-2024-47539](https://cve.now/CVE-2024-47539.md): GHSL-2024-195: GStreamer has an OOB-write in convert\_to\_s334\_1a (CVSS 8.6)
- [CVE-2024-47538](https://cve.now/CVE-2024-47538.md): GHSL-2024-115: GStreamer has a stack-buffer overflow in vorbis\_handle\_identification\_packet (CVSS 8.6)
- [CVE-2024-47537](https://cve.now/CVE-2024-47537.md): GHSL-2024-094: GStreamer has an OOB-write in isomp4/qtdemux.c (CVSS 8.6)
- [CVE-2024-40897](https://cve.now/CVE-2024-40897.md): Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. (CVSS 7.0)
- [CVE-2024-0444](https://cve.now/CVE-2024-0444.md): GStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.5)
- [CVE-2024-4453](https://cve.now/CVE-2024-4453.md): GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2023-50186](https://cve.now/CVE-2023-50186.md): GStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.5)
- [CVE-2023-44446](https://cve.now/CVE-2023-44446.md): GStreamer MXF File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2023-44429](https://cve.now/CVE-2023-44429.md): GStreamer AV1 Codec Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2023-40476](https://cve.now/CVE-2023-40476.md): GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2023-40475](https://cve.now/CVE-2023-40475.md): GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2023-40474](https://cve.now/CVE-2023-40474.md): GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2023-38104](https://cve.now/CVE-2023-38104.md): GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2023-38103](https://cve.now/CVE-2023-38103.md): GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2023-37329](https://cve.now/CVE-2023-37329.md): GStreamer SRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2023-37328](https://cve.now/CVE-2023-37328.md): GStreamer PGS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2023-37327](https://cve.now/CVE-2023-37327.md): GStreamer FLAC File Parsing Integer Overflow Remote Code Execution Vulnerability (CVSS 7.6)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/gstreamer
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.