GS
Product
gstreamer
112
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 20High 72Medium 18Low 0
Watch
Add gstreamer to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-111183 | 9.8 | Oct 21 | GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: 5903987091bb25e4f549331032cd2e3494cf8dae |
| CVE-2024-47613 | 9.8 | Dec 11 | GHSL-2024-118: GStreamer has a null pointer dereference in gst_gdk_pixbuf_dec_flush Affected: < 1.24.10 |
| CVE-2024-47615 | 9.8 | Dec 11 | GHSL-2024-117: GStreamer has an out-of-bounds write in Ogg demuxer Affected: < 1.24.10 |
| CVE-2024-47607 | 9.8 | Dec 11 | GHSL-2024-116: Stack-buffer overflow in gst_opus_dec_parse_header Affected: < 1.24.10 |
| CVE-2024-47606 | 9.8 | Dec 11 | GHSL-2024-166: GStreamer Integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes Affected: < 1.24.10 |
| CVE-2024-47540 | 9.8 | Dec 11 | GHSL-2024-197: GStreamer uses uninitialized stack memory in Matroska/WebM demuxer Affected: < 1.24.10 |
| CVE-2024-47539 | 9.8 | Dec 11 | GHSL-2024-195: GStreamer has an OOB-write in convert_to_s334_1a Affected: < 1.24.10 |
| CVE-2024-47538 | 9.8 | Dec 11 | GHSL-2024-115: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packet Affected: < 1.24.10 |
| CVE-2024-47537 | 9.8 | Dec 11 | GHSL-2024-094: GStreamer has an OOB-write in isomp4/qtdemux.c Affected: < 1.24.10 |
| CVE-2016-9636 | 9.8 | Jan 27 | Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary… Affected: through 1.10.1 |
| CVE-2016-9635 | 9.8 | Jan 27 | Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary… Affected: through 1.10.1 |
| CVE-2016-9634 | 9.8 | Jan 27 | Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary… Affected: through 1.10.1 |
| CVE-2024-47834 | 9.1 | Dec 11 | GHSL-2024-280: Gstreamer Use-After-Free read in Matroska CodecPrivate Affected: < 1.24.10 |
| CVE-2024-47777 | 9.1 | Dec 11 | GHSL-2024-259: GStreamer has an OOB-read in gst_wavparse_smpl_chunk Affected: < 1.24.10 |
| CVE-2024-47776 | 9.1 | Dec 11 | GHSL-2024-260: GStreamer has a OOB-read in gst_wavparse_cue_chunk Affected: < 1.24.10 |
| CVE-2024-47775 | 9.1 | Dec 11 | GHSL-2024-261: GStreamer has an OOB-read in parse_ds64 Affected: < 1.24.10 |
| CVE-2024-47774 | 9.1 | Dec 11 | GHSL-2024-262: GStreamer has an OOB-read in gst_avi_subtitle_parse_gab2_chunk Affected: < 1.24.10 |
| CVE-2024-47600 | 9.1 | Dec 11 | GHSL-2024-248: GStreamer has an OOB-read in format_channel_mask Affected: < 1.24.10 |
| CVE-2024-47598 | 9.1 | Dec 11 | GHSL-2024-246: GStreamer has an OOB-read in qtdemux_merge_sample_table Affected: < 1.24.10 |
| CVE-2024-47597 | 9.1 | Dec 11 | GHSL-2024-245: GStreamer has an OOB-read in qtdemux_parse_samples Affected: < 1.24.10 |
| CVE-2026-3083 | 8.8 | Mar 13 | GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: 1c6e163aa33962f5ee4a87d29319ccdd5cb67612 |
| CVE-2026-3085 | 8.8 | Mar 13 | GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: 1c6e163aa33962f5ee4a87d29319ccdd5cb67612 |
| CVE-2025-3887 | 8.8 | May 22 | GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability Affected: 2e8b542145c1b11f8b8d927f6c679fd8028ceb60 |
| CVE-2024-0444 | 8.8 | Jun 7 | GStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability Affected: before 1.22.0 |
| CVE-2023-50186 | 8.8 | May 3 | GStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability Affected: before 1.22.8 |
| CVE-2023-44446 | 8.8 | May 3 | GStreamer MXF File Parsing Use-After-Free Remote Code Execution Vulnerability Affected: before 1.22.7 |
| CVE-2023-44429 | 8.8 | May 3 | GStreamer AV1 Codec Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: before 1.22.7 |
| CVE-2023-40476 | 8.8 | May 3 | GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability Affected: before 1.22.6 |
| CVE-2023-40475 | 8.8 | May 3 | GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability Affected: before 1.22.6 |
| CVE-2023-40474 | 8.8 | May 3 | GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability Affected: before 1.22.6 |
| CVE-2023-38104 | 8.8 | May 3 | GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability Affected: 1.22.3 |
| CVE-2023-38103 | 8.8 | May 3 | GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability Affected: 1.22.3 |
| CVE-2023-37329 | 8.8 | May 3 | GStreamer SRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: before 1.20.7; 1.22.0 before 1.22.4 |
| CVE-2023-37328 | 8.8 | May 3 | GStreamer PGS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: before 1.20.7; 1.22.0 before 1.22.4 |
| CVE-2023-37327 | 8.8 | May 3 | GStreamer FLAC File Parsing Integer Overflow Remote Code Execution Vulnerability Affected: before 1.20.7; 1.22.0 before 1.22.4 |
| CVE-2019-9928 | 8.8 | Apr 24 | GStreamer before 1.16.0 has a heap-based buffer overflow in the RTSP connection parser via a crafted response from a server, potentially allowing remote code execution Affected: before 1.16.0 |
| CVE-2025-47219 | 8.1 | Aug 7 | In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read past the end of a heap buffer while parsing an MP4 file, possibly leading to information… Affected: before 1.26.2 |
| CVE-2026-18299 | 7.8 | Aug 20 | GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability Affected: 99fde1184fe8b12d0721230941c1bf2080913183 |
| CVE-2026-18298 | 7.8 | Aug 20 | GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: 13fcb641ed33d1472e4ffdec2846180b15405053 |
| CVE-2026-18297 | 7.8 | Aug 20 | GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability Affected: e3d33ecb5765f11c85b5ba739a0f1cf2bea81abe |
| CVE-2026-18296 | 7.8 | Aug 20 | GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: 13fcb641ed33d1472e4ffdec2846180b15405053 |
| CVE-2026-18295 | 7.8 | Aug 20 | GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: 13fcb641ed33d1472e4ffdec2846180b15405053 |
| CVE-2026-5056 | 7.8 | Jul 29 | GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability Affected: a303670510771b993867ddf62bff3bce0cb988c3 |
| CVE-2026-3084 | 7.8 | Mar 13 | GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability Affected: 1c6e163aa33962f5ee4a87d29319ccdd5cb67612 |
| CVE-2026-2921 | 7.8 | Mar 13 | GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability Affected: 1c6e163aa33962f5ee4a87d29319ccdd5cb67612 |
| CVE-2026-3086 | 7.8 | Mar 13 | GStreamer H.266 Codec Parser Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: 1c6e163aa33962f5ee4a87d29319ccdd5cb67612 |
| CVE-2026-3082 | 7.8 | Mar 13 | GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: 1c6e163aa33962f5ee4a87d29319ccdd5cb67612 |
| CVE-2026-3081 | 7.8 | Mar 13 | GStreamer H.266 Codec Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability Affected: 1c6e163aa33962f5ee4a87d29319ccdd5cb67612 |
| CVE-2026-2923 | 7.8 | Mar 13 | GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: 1c6e163aa33962f5ee4a87d29319ccdd5cb67612 |
| CVE-2026-2922 | 7.8 | Mar 13 | GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: 1c6e163aa33962f5ee4a87d29319ccdd5cb67612 |