GS
Product
GStreamer
112
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 20High 72Medium 18Low 0
Watch
Add GStreamer to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-5844 | 5.5 | Feb 9 | The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service… Affected: through 1.10.2 |
| CVE-2017-5842 | 5.5 | Feb 9 | The html_context_handle_element function in gst/subparse/samiparse.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service… Affected: through 1.10.2 |
| CVE-2017-5837 | 5.5 | Feb 9 | The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service… Affected: through 1.10.2 |
| CVE-2016-10198 | 5.5 | Feb 9 | The gst_aac_parse_sink_setcaps function in gst/audioparsers/gstaacparse.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service… Affected: through 1.10.2 |
| CVE-2016-9813 | 5.5 | Jan 13 | The _parse_pat function in the mpegts parser in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted… Affected: through 1.10.1 |
| CVE-2016-9810 | 5.5 | Jan 13 | The gst_decode_chain_free_internal function in the flxdex decoder in gst-plugins-good in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (invalid… Affected: through 1.10.1 |
| CVE-2016-9807 | 5.5 | Jan 13 | The flx_decode_chunks function in gst/flx/gstflxdec.c in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted… Affected: through 1.10.1 |
| CVE-2016-9811 | 4.7 | Jan 13 | The windows_icon_typefind function in gst-plugins-base in GStreamer before 1.10.2, when G_SLICE is set to always-malloc, allows remote attackers to cause a denial of service… Affected: through 1.10.1 |
| CVE-2026-12892 | 4.4 | Jun 23 | Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad: 1-byte heap out-of-bounds read in h.264 nal extension slice parser Affected: All versions, or not specified |
| CVE-2026-12891 | 4.3 | Jun 23 | Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad: global buffer overflow (oob read) in h.266/vvc vui parameter parser Affected: All versions, or not specified |
| CVE-2015-0797 | – | May 14 | GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 on Linux, allows remote attackers to cause a denial of… Affected: before 1.4.5 |
| CVE-2009-0586 | – | Mar 14 | Integer overflow in the gst_vorbis_tag_add_coverart function (gst-libs/gst/tag/gstvorbistag.c) in vorbistag in gst-plugins-base (aka gstreamer-plugins-base) before 0.10.23 in… Affected: before 0.10.23 |