Gstreamer vulnerabilities
70 CVEs and advisories name Gstreamer as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-47777GHSL-2024-259: GStreamer has an OOB-read in gst_wavparse_smpl_chunk
- CVE-2024-47776GHSL-2024-260: GStreamer has a OOB-read in gst_wavparse_cue_chunk
- CVE-2024-47775GHSL-2024-261: GStreamer has an OOB-read in parse_ds64
- CVE-2024-47774GHSL-2024-262: GStreamer has an OOB-read in gst_avi_subtitle_parse_gab2_chunk
- CVE-2024-47613GHSL-2024-118: GStreamer has a null pointer dereference in gst_gdk_pixbuf_dec_flush
- CVE-2024-47615GHSL-2024-117: GStreamer has an out-of-bounds write in Ogg demuxer
- CVE-2024-47607GHSL-2024-116: Stack-buffer overflow in gst_opus_dec_parse_header
- CVE-2024-47606GHSL-2024-166: GStreamer Integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes
- CVE-2024-47603GHSL-2024-251: GStreamer NULL-pointer dereference in Matroska/WebM demuxer
- CVE-2024-47602GHSL-2024-250: Streamer NULL-pointer dereferences and out-of-bounds reads in Matroska/WebM demuxer
- CVE-2024-47601GHSL-2024-249: GStreamer has a NULL-pointer dereference in Matroska/WebM demuxer
- CVE-2024-47600GHSL-2024-248: GStreamer has an OOB-read in format_channel_mask
- CVE-2024-47599GHSL-2024-247: GStreamer Insufficient error handling in JPEG decoder that can lead to NULL-pointer dereferences
- CVE-2024-47598GHSL-2024-246: GStreamer has an OOB-read in qtdemux_merge_sample_table
- CVE-2024-47597GHSL-2024-245: GStreamer has an OOB-read in qtdemux_parse_samples
- CVE-2024-47596GHSL-2024-244: GStreamer has an OOB-read in FOURCC_SMI_ parsing
- CVE-2024-47546GHSL-2024-243: GStreamer has an integer underflow in extract_cc_from_data leading to OOB-read
- CVE-2024-47545GHSL-2024-242: GStreamer has an integer underflow in FOURCC_strf parsing leading to OOB-read
- CVE-2024-47544GHSL-2024-238: GStreamer has NULL-pointer dereferences in MP4/MOV demuxer CENC handling
- CVE-2024-47543GHSL-2024-236: GStreamer has an OOB-read in qtdemux_parse_container
- CVE-2024-47542GHSL-2024-235: GStreamer ID3v2 parser out-of-bounds read and NULL-pointer dereference
- CVE-2024-47541GHSL-2024-228: GStreamer has an out-of-bounds write in SSA subtitle parser
- CVE-2024-47540GHSL-2024-197: GStreamer uses uninitialized stack memory in Matroska/WebM demuxer
- CVE-2024-47539GHSL-2024-195: GStreamer has an OOB-write in convert_to_s334_1a
- CVE-2024-47538GHSL-2024-115: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packet
- CVE-2024-47537GHSL-2024-094: GStreamer has an OOB-write in isomp4/qtdemux.c
- CVE-2024-40897Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39.
- CVE-2024-0444GStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-4453GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability
- CVE-2023-50186GStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability