GS
Product
GStreamer
112
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 20High 72Medium 18Low 0
Watch
Add GStreamer to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-3083 | 8.8 | Mar 13 | GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: 1c6e163aa33962f5ee4a87d29319ccdd5cb67612 |
| CVE-2026-3085 | 8.8 | Mar 13 | GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: 1c6e163aa33962f5ee4a87d29319ccdd5cb67612 |
| CVE-2025-3887 | 8.8 | May 22 | GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability Affected: 1.0.0 before 1.26.1 |
| CVE-2024-0444 | 8.8 | Jun 7 | GStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability Affected: before 1.22.0 |
| CVE-2023-50186 | 8.8 | May 3 | GStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability Affected: before 1.22.8 |
| CVE-2023-44446 | 8.8 | May 3 | GStreamer MXF File Parsing Use-After-Free Remote Code Execution Vulnerability Affected: before 1.22.7 |
| CVE-2023-44429 | 8.8 | May 3 | GStreamer AV1 Codec Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: before 1.22.7 |
| CVE-2023-40476 | 8.8 | May 3 | GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability Affected: before 1.22.6 |
| CVE-2023-40475 | 8.8 | May 3 | GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability Affected: before 1.22.6 |
| CVE-2023-40474 | 8.8 | May 3 | GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability Affected: before 1.22.6 |
| CVE-2023-38104 | 8.8 | May 3 | GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability Affected: 1.22.3 |
| CVE-2023-38103 | 8.8 | May 3 | GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability Affected: 1.22.3 |
| CVE-2023-37329 | 8.8 | May 3 | GStreamer SRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: before 1.20.7; 1.22.0 before 1.22.4 |
| CVE-2023-37328 | 8.8 | May 3 | GStreamer PGS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: before 1.20.7; 1.22.0 before 1.22.4 |
| CVE-2023-37327 | 8.8 | May 3 | GStreamer FLAC File Parsing Integer Overflow Remote Code Execution Vulnerability Affected: before 1.20.7; 1.22.0 before 1.22.4 |
| CVE-2019-9928 | 8.8 | Apr 24 | GStreamer before 1.16.0 has a heap-based buffer overflow in the RTSP connection parser via a crafted response from a server, potentially allowing remote code execution Affected: before 1.16.0 |
| CVE-2025-47219 | 8.1 | Aug 7 | In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read past the end of a heap buffer while parsing an MP4 file, possibly leading to information… Affected: before 1.26.2 |
| CVE-2026-18299 | 7.8 | Aug 20 | GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability Affected: 99fde1184fe8b12d0721230941c1bf2080913183 |
| CVE-2026-18298 | 7.8 | Aug 20 | GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: 13fcb641ed33d1472e4ffdec2846180b15405053 |
| CVE-2026-18297 | 7.8 | Aug 20 | GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability Affected: e3d33ecb5765f11c85b5ba739a0f1cf2bea81abe |
| CVE-2026-18296 | 7.8 | Aug 20 | GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: 13fcb641ed33d1472e4ffdec2846180b15405053 |
| CVE-2026-18295 | 7.8 | Aug 20 | GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: 13fcb641ed33d1472e4ffdec2846180b15405053 |
| CVE-2026-5056 | 7.8 | Jul 29 | GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability Affected: a303670510771b993867ddf62bff3bce0cb988c3 |
| CVE-2026-3084 | 7.8 | Mar 13 | GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability Affected: 1c6e163aa33962f5ee4a87d29319ccdd5cb67612 |
| CVE-2026-2921 | 7.8 | Mar 13 | GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability Affected: 1c6e163aa33962f5ee4a87d29319ccdd5cb67612 |
| CVE-2026-3086 | 7.8 | Mar 13 | GStreamer H.266 Codec Parser Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: 1c6e163aa33962f5ee4a87d29319ccdd5cb67612 |
| CVE-2026-3082 | 7.8 | Mar 13 | GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: 1c6e163aa33962f5ee4a87d29319ccdd5cb67612 |
| CVE-2026-3081 | 7.8 | Mar 13 | GStreamer H.266 Codec Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability Affected: 1c6e163aa33962f5ee4a87d29319ccdd5cb67612 |
| CVE-2026-2923 | 7.8 | Mar 13 | GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: 1c6e163aa33962f5ee4a87d29319ccdd5cb67612 |
| CVE-2026-2922 | 7.8 | Mar 13 | GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: 1c6e163aa33962f5ee4a87d29319ccdd5cb67612 |
| CVE-2026-2920 | 7.8 | Mar 13 | GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: 1c6e163aa33962f5ee4a87d29319ccdd5cb67612 |
| CVE-2025-6663 | 7.8 | Jul 7 | GStreamer H266 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability Affected: 1.26.0 before 1.26.3 |
| CVE-2025-2759 | 7.8 | May 22 | GStreamer Incorrect Permission Assignment Local Privilege Escalation Vulnerability Affected: before 1.25.1 |
| CVE-2024-4453 | 7.8 | May 22 | GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability Affected: 1.24.0; 1.24.1 |
| CVE-2022-2122 | 7.8 | Jul 19 | DOS / potential heap overwrite in qtdemux using zlib decompression Affected: before 1.20.3 |
| CVE-2022-1925 | 7.8 | Jul 19 | DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression Affected: before 1.20.3 |
| CVE-2022-1924 | 7.8 | Jul 19 | DOS / potential heap overwrite in mkv demuxing using lzo decompression Affected: before 1.20.3 |
| CVE-2022-1923 | 7.8 | Jul 19 | DOS / potential heap overwrite in mkv demuxing using bzip decompression Affected: before 1.20.3 |
| CVE-2022-1922 | 7.8 | Jul 19 | DOS / potential heap overwrite in mkv demuxing using zlib decompression Affected: before 1.20.3 |
| CVE-2022-1921 | 7.8 | Jul 19 | Integer overflow in avidemux element in gst_avi_demux_invert function which allows a heap overwrite while parsing avi files Affected: before 1.20.3 |
| CVE-2022-1920 | 7.8 | Jul 19 | Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite while parsing matroska files Affected: before 1.20.3 |
| CVE-2021-3498 | 7.8 | Apr 19 | GStreamer before 1.18.4 might cause heap corruption when parsing certain malformed Matroska files Affected: 1.0.0 before 1.18.4 |
| CVE-2021-3497 | 7.8 | Apr 19 | GStreamer before 1.18.4 might access already-freed memory in error code paths when demuxing certain malformed Matroska files Affected: 0.10.0 before 1.18.4 |
| CVE-2016-9447 | 7.8 | Jan 23 | The ROM mappings in the NSF decoder in gstreamer 0.10.x allow remote attackers to cause a denial of service (out-of-bounds read or write) and possibly execute arbitrary code via a… Affected: 0.10.0; 0.10.1; 0.10.2; 0.10.3; 0.10.4; 0.10.5; +31 more |
| CVE-2016-9809 | 7.8 | Jan 13 | Off-by-one error in the gst_h264_parse_set_caps function in GStreamer before 1.10.2 allows remote attackers to have unspecified impact via a crafted file, which triggers an… Affected: through 1.10.1 |
| CVE-2026-1940 | 7.5 | Mar 23 | Gstreamer: incomplete fix of cve-2026-1940 Affected: before 1.28.1 |
| CVE-2024-47835 | 7.5 | Dec 12 | GStreamer is a library for constructing graphs of media-handling components Affected: before 1.24.10 |
| CVE-2024-47778 | 7.5 | Dec 12 | GStreamer is a library for constructing graphs of media-handling components Affected: before 1.24.10 |
| CVE-2024-47603 | 7.5 | Dec 12 | GStreamer is a library for constructing graphs of media-handling components Affected: before 1.24.10 |
| CVE-2024-47602 | 7.5 | Dec 12 | GStreamer is a library for constructing graphs of media-handling components Affected: before 1.24.10 |
