GS
Product
gstreamer
112
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 20High 72Medium 18Low 0
Watch
Add gstreamer to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-73433 | 6.6 | Aug 12 | Gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux fujifilm strd parsing leading to out-of-bounds read/write Affected: through 1.28.6 |
| CVE-2025-47183 | 6.6 | Aug 7 | In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_tree function may read past the end of a heap buffer while parsing an MP4 file, leading to information disclosure Affected: before 1.26.2 |
| CVE-2026-73434 | 6.1 | Aug 12 | Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing Affected: before 1.28.6 |
| CVE-2025-47806 | 5.6 | Aug 7 | In GStreamer through 1.26.1, the subparse plugin's parse_subrip_time function may write data past the bounds of a stack buffer, leading to a crash Affected: before 1.26.2 |
| CVE-2025-47808 | 5.6 | Aug 7 | In GStreamer through 1.26.1, the subparse plugin's tmplayer_parse_line function may dereference a NULL pointer while parsing a subtitle file, leading to a crash Affected: before 1.26.2 |
| CVE-2025-47807 | 5.5 | Aug 7 | In GStreamer through 1.26.1, the subparse plugin's subrip_unescape_formatting function may dereference a NULL pointer while parsing a subtitle file, leading to a crash Affected: before 1.26.2 |
| CVE-2021-3522 | 5.5 | Jun 2 | GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags Affected: before 1.18.4 |
| CVE-2017-5846 | 5.5 | Feb 9 | The gst_asf_demux_process_ext_stream_props function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer before 1.10.3 allows remote attackers to cause a denial of… Affected: through 1.10.2 |
| CVE-2017-5844 | 5.5 | Feb 9 | The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service… Affected: through 1.10.2 |
| CVE-2017-5842 | 5.5 | Feb 9 | The html_context_handle_element function in gst/subparse/samiparse.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service… Affected: through 1.10.2 |
| CVE-2017-5837 | 5.5 | Feb 9 | The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service… Affected: through 1.10.2 |
| CVE-2016-10198 | 5.5 | Feb 9 | The gst_aac_parse_sink_setcaps function in gst/audioparsers/gstaacparse.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service… Affected: through 1.10.2 |
| CVE-2016-9813 | 5.5 | Jan 13 | The _parse_pat function in the mpegts parser in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted… Affected: through 1.10.1 |
| CVE-2016-9810 | 5.5 | Jan 13 | The gst_decode_chain_free_internal function in the flxdex decoder in gst-plugins-good in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (invalid… Affected: through 1.10.1 |
| CVE-2016-9807 | 5.5 | Jan 13 | The flx_decode_chunks function in gst/flx/gstflxdec.c in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted… Affected: through 1.10.1 |
| CVE-2016-9811 | 4.7 | Jan 13 | The windows_icon_typefind function in gst-plugins-base in GStreamer before 1.10.2, when G_SLICE is set to always-malloc, allows remote attackers to cause a denial of service… Affected: through 1.10.1 |
| CVE-2026-12892 | 4.4 | Jun 23 | Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad: 1-byte heap out-of-bounds read in h.264 nal extension slice parser Affected: All versions, or not specified |
| CVE-2026-12891 | 4.3 | Jun 23 | Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad: global buffer overflow (oob read) in h.266/vvc vui parameter parser Affected: All versions, or not specified |
Showing 18