GS
Product
gstreamer
112
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 20High 72Medium 18Low 0
Watch
Add gstreamer to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-47601 | 7.5 | Dec 11 | GHSL-2024-249: GStreamer has a NULL-pointer dereference in Matroska/WebM demuxer Affected: < 1.24.10 |
| CVE-2024-47599 | 7.5 | Dec 11 | GHSL-2024-247: GStreamer Insufficient error handling in JPEG decoder that can lead to NULL-pointer dereferences Affected: < 1.24.10 |
| CVE-2024-47596 | 7.5 | Dec 11 | GHSL-2024-244: GStreamer has an OOB-read in FOURCC_SMI_ parsing Affected: < 1.24.10 |
| CVE-2024-47546 | 7.5 | Dec 11 | GHSL-2024-243: GStreamer has an integer underflow in extract_cc_from_data leading to OOB-read Affected: < 1.24.10 |
| CVE-2024-47545 | 7.5 | Dec 11 | GHSL-2024-242: GStreamer has an integer underflow in FOURCC_strf parsing leading to OOB-read Affected: < 1.24.10 |
| CVE-2024-47544 | 7.5 | Dec 11 | GHSL-2024-238: GStreamer has NULL-pointer dereferences in MP4/MOV demuxer CENC handling Affected: < 1.24.10 |
| CVE-2024-47543 | 7.5 | Dec 11 | GHSL-2024-236: GStreamer has an OOB-read in qtdemux_parse_container Affected: < 1.24.10 |
| CVE-2024-47542 | 7.5 | Dec 11 | GHSL-2024-235: GStreamer ID3v2 parser out-of-bounds read and NULL-pointer dereference Affected: < 1.24.10 |
| CVE-2024-47541 | 7.5 | Dec 11 | GHSL-2024-228: GStreamer has an out-of-bounds write in SSA subtitle parser Affected: < 1.24.10 |
| CVE-2017-5848 | 7.5 | Feb 9 | The gst_ps_demux_parse_psm function in gst/mpegdemux/gstmpegdemux.c in gst-plugins-bad in GStreamer allows remote attackers to cause a denial of service (invalid memory read and… Affected: before 1.11.2 |
| CVE-2017-5847 | 7.5 | Feb 9 | The gst_asf_demux_process_ext_content_desc function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer allows remote attackers to cause a denial of service… Affected: before 1.11.2 |
| CVE-2017-5845 | 7.5 | Feb 9 | The gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (invalid memory… Affected: through 1.10.2 |
| CVE-2017-5843 | 7.5 | Feb 9 | Multiple use-after-free vulnerabilities in the (1) gst_mini_object_unref, (2) gst_tag_list_unref, and (3) gst_mxf_demux_update_essence_tracks functions in GStreamer before 1.10.3… Affected: through 1.10.2 |
| CVE-2017-5841 | 7.5 | Feb 9 | The gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds… Affected: through 1.10.2 |
| CVE-2017-5840 | 7.5 | Feb 9 | The qtdemux_parse_samples function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap… Affected: through 1.10.2 |
| CVE-2017-5839 | 7.5 | Feb 9 | The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 does not properly limit recursion, which allows remote… Affected: through 1.10.2 |
| CVE-2017-5838 | 7.5 | Feb 9 | The gst_date_time_new_from_iso8601_string function in gst/gstdatetime.c in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read)… Affected: through 1.10.2 |
| CVE-2016-10199 | 7.5 | Feb 9 | The qtdemux_tag_add_str_full function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds… Affected: through 1.10.2 |
| CVE-2016-9446 | 7.5 | Jan 23 | The vmnc decoder in the gstreamer does not initialize the render canvas, which allows remote attackers to obtain sensitive information as demonstrated by thumbnailing a simple 1… Affected: before 1.11.1 |
| CVE-2016-9445 | 7.5 | Jan 23 | Integer overflow in the vmnc decoder in the gstreamer allows remote attackers to cause a denial of service (crash) via large width and height values, which triggers a buffer… Affected: 1.10.0 |
| CVE-2016-9812 | 7.5 | Jan 13 | The gst_mpegts_section_new function in the mpegts decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a too small… Affected: through 1.10.1 |
| CVE-2016-9808 | 7.5 | Jan 13 | The FLIC decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via a crafted series of skip and count pairs Affected: through 1.10.1 |