GS
Vendor
gstreamer
124
CVEs
0
On KEV
1
New 30D
Products
GS9.8
gstreamer
gstreamer
112 CVEs0 on KEV1 new
GP9.1
Good Plug-ins
GStreamer
6 CVEs0 on KEV0 new
PL–
Plug-ins
Gstreamer
3 CVEs0 on KEV0 new
GS6.6
gst-plugins-good
GStreamer
2 CVEs0 on KEV0 new
OR6.7
ORC
GStreamer
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-111183 | GS GStreamer GStreamer | 9.8 | Oct 21 | GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2026-18299 | GS GStreamer GStreamer | 7.8 | Aug 20 | GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability |
| CVE-2026-18298 | GS GStreamer GStreamer | 7.8 | Aug 20 | GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2026-18297 | GS GStreamer GStreamer | 7.8 | Aug 20 | GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2026-18296 | GS GStreamer GStreamer | 7.8 | Aug 20 | GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2026-18295 | GS GStreamer GStreamer | 7.8 | Aug 20 | GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
| CVE-2026-73433 | GS gst-plugins-good GStreamer | 6.6 | Aug 12 | Gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux fujifilm strd parsing leading to out-of-bounds read/write |
| CVE-2026-73434 | GS gst-plugins-good GStreamer | 6.1 | Aug 12 | Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing |
| CVE-2026-5056 | GS GStreamer GStreamer | 7.8 | Jul 29 | GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2026-12892 | GS Gstreamer Gstreamer | 4.4 | Jun 23 | Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad: 1-byte heap out-of-bounds read in h.264 nal extension slice parser |
| CVE-2026-12891 | GS Gstreamer Gstreamer | 4.3 | Jun 23 | Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad: global buffer overflow (oob read) in h.266/vvc vui parameter parser |
| CVE-2026-46470 | GP Good Plug-ins GStreamer | 9.1 | May 14 | An issue was discovered in GStreamer gst-plugins-good before 1.28.2 |
| CVE-2026-46469 | GP Good Plug-ins GStreamer | 5.5 | May 14 | An issue was discovered in GStreamer gst-plugins-good before 1.28.2 |
| CVE-2026-1940 | GS Gstreamer Gstreamer | 7.5 | Mar 23 | Gstreamer: incomplete fix of cve-2026-1940 |
| CVE-2026-3084 | GS GStreamer GStreamer | 7.8 | Mar 13 | GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability |
| CVE-2026-2921 | GS GStreamer GStreamer | 7.8 | Mar 13 | GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability |
| CVE-2026-3083 | GS GStreamer GStreamer | 8.8 | Mar 13 | GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability |
| CVE-2026-3086 | GS GStreamer GStreamer | 7.8 | Mar 13 | GStreamer H.266 Codec Parser Out-Of-Bounds Write Remote Code Execution Vulnerability |
| CVE-2026-3085 | GS GStreamer GStreamer | 8.8 | Mar 13 | GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2026-3082 | GS GStreamer GStreamer | 7.8 | Mar 13 | GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2026-3081 | GS GStreamer GStreamer | 7.8 | Mar 13 | GStreamer H.266 Codec Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2026-2923 | GS GStreamer GStreamer | 7.8 | Mar 13 | GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability |
| CVE-2026-2922 | GS GStreamer GStreamer | 7.8 | Mar 13 | GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution Vulnerability |
| CVE-2026-2920 | GS GStreamer GStreamer | 7.8 | Mar 13 | GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2025-47183 | GS Gstreamer Gstreamer | 6.6 | Aug 7 | In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_tree function may read past the end of a heap buffer while parsing an MP4 file, leading to information disclosure |
| CVE-2025-47808 | GS Gstreamer Gstreamer | 5.6 | Aug 7 | In GStreamer through 1.26.1, the subparse plugin's tmplayer_parse_line function may dereference a NULL pointer while parsing a subtitle file, leading to a crash |
| CVE-2025-47807 | GS Gstreamer Gstreamer | 5.5 | Aug 7 | In GStreamer through 1.26.1, the subparse plugin's subrip_unescape_formatting function may dereference a NULL pointer while parsing a subtitle file, leading to a crash |
| CVE-2025-47806 | GS Gstreamer Gstreamer | 5.6 | Aug 7 | In GStreamer through 1.26.1, the subparse plugin's parse_subrip_time function may write data past the bounds of a stack buffer, leading to a crash |
| CVE-2025-47219 | GS Gstreamer Gstreamer | 8.1 | Aug 7 | In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read past the end of a heap buffer while parsing an MP4 file, possibly leading to information… |
| CVE-2025-6663 | GS GStreamer GStreamer | 7.8 | Jul 7 | GStreamer H266 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2025-2759 | GS GStreamer GStreamer | 7.8 | May 22 | GStreamer Incorrect Permission Assignment Local Privilege Escalation Vulnerability |
| CVE-2025-3887 | GS GStreamer GStreamer | 8.8 | May 22 | GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2024-47834 | GS gstreamer gstreamer | 9.1 | Dec 11 | GHSL-2024-280: Gstreamer Use-After-Free read in Matroska CodecPrivate |
| CVE-2024-47835 | GS gstreamer gstreamer | 7.5 | Dec 11 | GHSL-2024-263: Gstreamer NULL-pointer dereference in LRC subtitle parser |
| CVE-2024-47778 | GS gstreamer gstreamer | 7.5 | Dec 11 | GHSL-2024-258: GStreamer has an OOB-read in gst_wavparse_adtl_chunk |
| CVE-2024-47777 | GS gstreamer gstreamer | 9.1 | Dec 11 | GHSL-2024-259: GStreamer has an OOB-read in gst_wavparse_smpl_chunk |
| CVE-2024-47776 | GS gstreamer gstreamer | 9.1 | Dec 11 | GHSL-2024-260: GStreamer has a OOB-read in gst_wavparse_cue_chunk |
| CVE-2024-47775 | GS gstreamer gstreamer | 9.1 | Dec 11 | GHSL-2024-261: GStreamer has an OOB-read in parse_ds64 |
| CVE-2024-47774 | GS gstreamer gstreamer | 9.1 | Dec 11 | GHSL-2024-262: GStreamer has an OOB-read in gst_avi_subtitle_parse_gab2_chunk |
| CVE-2024-47613 | GS gstreamer gstreamer | 9.8 | Dec 11 | GHSL-2024-118: GStreamer has a null pointer dereference in gst_gdk_pixbuf_dec_flush |
| CVE-2024-47615 | GS gstreamer gstreamer | 9.8 | Dec 11 | GHSL-2024-117: GStreamer has an out-of-bounds write in Ogg demuxer |
| CVE-2024-47607 | GS gstreamer gstreamer | 9.8 | Dec 11 | GHSL-2024-116: Stack-buffer overflow in gst_opus_dec_parse_header |
| CVE-2024-47606 | GS gstreamer gstreamer | 9.8 | Dec 11 | GHSL-2024-166: GStreamer Integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes |
| CVE-2024-47603 | GS gstreamer gstreamer | 7.5 | Dec 11 | GHSL-2024-251: GStreamer NULL-pointer dereference in Matroska/WebM demuxer |
| CVE-2024-47602 | GS gstreamer gstreamer | 7.5 | Dec 11 | GHSL-2024-250: Streamer NULL-pointer dereferences and out-of-bounds reads in Matroska/WebM demuxer |
| CVE-2024-47601 | GS gstreamer gstreamer | 7.5 | Dec 11 | GHSL-2024-249: GStreamer has a NULL-pointer dereference in Matroska/WebM demuxer |
| CVE-2024-47600 | GS gstreamer gstreamer | 9.1 | Dec 11 | GHSL-2024-248: GStreamer has an OOB-read in format_channel_mask |
| CVE-2024-47599 | GS gstreamer gstreamer | 7.5 | Dec 11 | GHSL-2024-247: GStreamer Insufficient error handling in JPEG decoder that can lead to NULL-pointer dereferences |
| CVE-2024-47598 | GS gstreamer gstreamer | 9.1 | Dec 11 | GHSL-2024-246: GStreamer has an OOB-read in qtdemux_merge_sample_table |
| CVE-2024-47597 | GS gstreamer gstreamer | 9.1 | Dec 11 | GHSL-2024-245: GStreamer has an OOB-read in qtdemux_parse_samples |
| CVE-2024-47596 | GS gstreamer gstreamer | 7.5 | Dec 11 | GHSL-2024-244: GStreamer has an OOB-read in FOURCC_SMI_ parsing |
| CVE-2024-47546 | GS gstreamer gstreamer | 7.5 | Dec 11 | GHSL-2024-243: GStreamer has an integer underflow in extract_cc_from_data leading to OOB-read |
| CVE-2024-47545 | GS gstreamer gstreamer | 7.5 | Dec 11 | GHSL-2024-242: GStreamer has an integer underflow in FOURCC_strf parsing leading to OOB-read |
| CVE-2024-47544 | GS gstreamer gstreamer | 7.5 | Dec 11 | GHSL-2024-238: GStreamer has NULL-pointer dereferences in MP4/MOV demuxer CENC handling |
| CVE-2024-47543 | GS gstreamer gstreamer | 7.5 | Dec 11 | GHSL-2024-236: GStreamer has an OOB-read in qtdemux_parse_container |
| CVE-2024-47542 | GS gstreamer gstreamer | 7.5 | Dec 11 | GHSL-2024-235: GStreamer ID3v2 parser out-of-bounds read and NULL-pointer dereference |
| CVE-2024-47541 | GS gstreamer gstreamer | 7.5 | Dec 11 | GHSL-2024-228: GStreamer has an out-of-bounds write in SSA subtitle parser |
| CVE-2024-47540 | GS gstreamer gstreamer | 9.8 | Dec 11 | GHSL-2024-197: GStreamer uses uninitialized stack memory in Matroska/WebM demuxer |
| CVE-2024-47539 | GS gstreamer gstreamer | 9.8 | Dec 11 | GHSL-2024-195: GStreamer has an OOB-write in convert_to_s334_1a |
| CVE-2024-47538 | GS gstreamer gstreamer | 9.8 | Dec 11 | GHSL-2024-115: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packet |