# GStreamer. Every CVE that names GStreamer among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-111183.md) `CVE-2026-111183` · CVE record: GStreamer GStreamer · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Oct 2026 · Tags: Memory corruption - [GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-18299.md) `CVE-2026-18299` · CVE record: GStreamer GStreamer · CVSS 7.8 High · Not analysed yet · Published 20 Aug 2026 · Tags: Memory corruption - [GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-18298.md) `CVE-2026-18298` · CVE record: GStreamer GStreamer · CVSS 7.8 High · Not analysed yet · Published 20 Aug 2026 · Tags: Memory corruption - [GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-18297.md) `CVE-2026-18297` · CVE record: GStreamer GStreamer · CVSS 7.8 High · Not analysed yet · Published 20 Aug 2026 · Tags: Memory corruption - [GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-18296.md) `CVE-2026-18296` · CVE record: GStreamer GStreamer · CVSS 7.8 High · Not analysed yet · Published 20 Aug 2026 · Tags: Memory corruption - [GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-18295.md) `CVE-2026-18295` · CVE record: GStreamer GStreamer · CVSS 7.8 High · Not analysed yet · Published 20 Aug 2026 · Tags: Memory corruption - [GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-5056.md) `CVE-2026-5056` · CVE record: GStreamer GStreamer · CVSS 7.8 High · Not analysed yet · Published 29 Jul 2026 · Tags: Memory corruption - [GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-3084.md) `CVE-2026-3084` · CVE record: GStreamer GStreamer · CVSS 7.8 High · Not analysed yet · Published 13 Mar 2026 · Tags: Memory corruption - [GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-2921.md) `CVE-2026-2921` · CVE record: GStreamer GStreamer · CVSS 7.8 High · Not analysed yet · Published 13 Mar 2026 · Tags: Memory corruption - [GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-3083.md) `CVE-2026-3083` · CVE record: GStreamer GStreamer · CVSS 8.8 High · Not analysed yet · Published 13 Mar 2026 · Tags: Memory corruption, CWE-129 - [GStreamer H.266 Codec Parser Out-Of-Bounds Write Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-3086.md) `CVE-2026-3086` · CVE record: GStreamer GStreamer · CVSS 7.8 High · Not analysed yet · Published 13 Mar 2026 · Tags: Memory corruption - [GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-3085.md) `CVE-2026-3085` · CVE record: GStreamer GStreamer · CVSS 8.8 High · Not analysed yet · Published 13 Mar 2026 · Tags: Memory corruption, CWE-1284 - [GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-3082.md) `CVE-2026-3082` · CVE record: GStreamer GStreamer · CVSS 7.8 High · Not analysed yet · Published 13 Mar 2026 · Tags: Memory corruption - [GStreamer H.266 Codec Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-3081.md) `CVE-2026-3081` · CVE record: GStreamer GStreamer · CVSS 7.8 High · Not analysed yet · Published 13 Mar 2026 · Tags: Memory corruption - [GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-2923.md) `CVE-2026-2923` · CVE record: GStreamer GStreamer · CVSS 7.8 High · Not analysed yet · Published 13 Mar 2026 · Tags: Memory corruption - [GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-2922.md) `CVE-2026-2922` · CVE record: GStreamer GStreamer · CVSS 7.8 High · Not analysed yet · Published 13 Mar 2026 · Tags: Memory corruption - [GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-2920.md) `CVE-2026-2920` · CVE record: GStreamer GStreamer · CVSS 7.8 High · Not analysed yet · Published 13 Mar 2026 · Tags: Memory corruption - [GStreamer H266 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-6663.md) `CVE-2025-6663` · CVE record: GStreamer GStreamer · CVSS 7.8 High · Not analysed yet · Published 7 Jul 2025 · Tags: Memory corruption - [GStreamer Incorrect Permission Assignment Local Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2025-2759.md) `CVE-2025-2759` · CVE record: GStreamer GStreamer · CVSS 7.0 High · Not analysed yet · Published 22 May 2025 · Tags: Broken access control - [GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-3887.md) `CVE-2025-3887` · CVE record: GStreamer GStreamer · CVSS 8.8 High · Not analysed yet · Published 22 May 2025 · Tags: Memory corruption - [GHSL-2024-280: Gstreamer Use-After-Free read in Matroska CodecPrivate](https://agentprime.io/advisories/CVE-2024-47834.md) `CVE-2024-47834` · CVE record: gstreamer gstreamer · CVSS 5.1 Medium · Not analysed yet · Published 11 Dec 2024 · Tags: Memory corruption - [GHSL-2024-263: Gstreamer NULL-pointer dereference in LRC subtitle parser](https://agentprime.io/advisories/CVE-2024-47835.md) `CVE-2024-47835` · CVE record: gstreamer gstreamer · CVSS 6.8 Medium · Not analysed yet · Published 11 Dec 2024 · Tags: Memory corruption - [GHSL-2024-258: GStreamer has an OOB-read in gst_wavparse_adtl_chunk](https://agentprime.io/advisories/CVE-2024-47778.md) `CVE-2024-47778` · CVE record: gstreamer gstreamer · CVSS 5.1 Medium · Not analysed yet · Published 11 Dec 2024 · Tags: Memory corruption - [GHSL-2024-259: GStreamer has an OOB-read in gst_wavparse_smpl_chunk](https://agentprime.io/advisories/CVE-2024-47777.md) `CVE-2024-47777` · CVE record: gstreamer gstreamer · CVSS 5.1 Medium · Not analysed yet · Published 11 Dec 2024 · Tags: Memory corruption - [GHSL-2024-260: GStreamer has a OOB-read in gst_wavparse_cue_chunk](https://agentprime.io/advisories/CVE-2024-47776.md) `CVE-2024-47776` · CVE record: gstreamer gstreamer · CVSS 5.1 Medium · Not analysed yet · Published 11 Dec 2024 · Tags: Memory corruption - [GHSL-2024-261: GStreamer has an OOB-read in parse_ds64](https://agentprime.io/advisories/CVE-2024-47775.md) `CVE-2024-47775` · CVE record: gstreamer gstreamer · CVSS 5.1 Medium · Not analysed yet · Published 11 Dec 2024 · Tags: Memory corruption - [GHSL-2024-262: GStreamer has an OOB-read in gst_avi_subtitle_parse_gab2_chunk](https://agentprime.io/advisories/CVE-2024-47774.md) `CVE-2024-47774` · CVE record: gstreamer gstreamer · CVSS 5.1 Medium · Not analysed yet · Published 11 Dec 2024 · Tags: Memory corruption - [GHSL-2024-118: GStreamer has a null pointer dereference in gst_gdk_pixbuf_dec_flush](https://agentprime.io/advisories/CVE-2024-47613.md) `CVE-2024-47613` · CVE record: gstreamer gstreamer · CVSS 8.6 High · Not analysed yet · Published 11 Dec 2024 · Tags: Memory corruption - [GHSL-2024-117: GStreamer has an out-of-bounds write in Ogg demuxer](https://agentprime.io/advisories/CVE-2024-47615.md) `CVE-2024-47615` · CVE record: gstreamer gstreamer · CVSS 8.6 High · Not analysed yet · Published 11 Dec 2024 · Tags: Memory corruption - [GHSL-2024-116: Stack-buffer overflow in gst_opus_dec_parse_header](https://agentprime.io/advisories/CVE-2024-47607.md) `CVE-2024-47607` · CVE record: gstreamer gstreamer · CVSS 8.6 High · Not analysed yet · Published 11 Dec 2024 · Tags: Memory corruption - [GHSL-2024-166: GStreamer Integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes](https://agentprime.io/advisories/CVE-2024-47606.md) `CVE-2024-47606` · CVE record: gstreamer gstreamer · CVSS 8.6 High · Not analysed yet · Published 11 Dec 2024 · Tags: Memory corruption - [GHSL-2024-251: GStreamer NULL-pointer dereference in Matroska/WebM demuxer](https://agentprime.io/advisories/CVE-2024-47603.md) `CVE-2024-47603` · CVE record: gstreamer gstreamer · CVSS 6.8 Medium · Not analysed yet · Published 11 Dec 2024 · Tags: Memory corruption - [GHSL-2024-250: Streamer NULL-pointer dereferences and out-of-bounds reads in Matroska/WebM demuxer](https://agentprime.io/advisories/CVE-2024-47602.md) `CVE-2024-47602` · CVE record: gstreamer gstreamer · CVSS 6.8 Medium · Not analysed yet · Published 11 Dec 2024 · Tags: Memory corruption - [GHSL-2024-249: GStreamer has a NULL-pointer dereference in Matroska/WebM demuxer](https://agentprime.io/advisories/CVE-2024-47601.md) `CVE-2024-47601` · CVE record: gstreamer gstreamer · CVSS 6.8 Medium · Not analysed yet · Published 11 Dec 2024 · Tags: Memory corruption - [GHSL-2024-248: GStreamer has an OOB-read in format_channel_mask](https://agentprime.io/advisories/CVE-2024-47600.md) `CVE-2024-47600` · CVE record: gstreamer gstreamer · CVSS 5.1 Medium · Not analysed yet · Published 11 Dec 2024 · Tags: Memory corruption - [GHSL-2024-247: GStreamer Insufficient error handling in JPEG decoder that can lead to NULL-pointer dereferences](https://agentprime.io/advisories/CVE-2024-47599.md) `CVE-2024-47599` · CVE record: gstreamer gstreamer · CVSS 6.8 Medium · Not analysed yet · Published 11 Dec 2024 · Tags: Memory corruption - [GHSL-2024-246: GStreamer has an OOB-read in qtdemux_merge_sample_table](https://agentprime.io/advisories/CVE-2024-47598.md) `CVE-2024-47598` · CVE record: gstreamer gstreamer · CVSS 5.1 Medium · Not analysed yet · Published 11 Dec 2024 · Tags: Memory corruption - [GHSL-2024-245: GStreamer has an OOB-read in qtdemux_parse_samples](https://agentprime.io/advisories/CVE-2024-47597.md) `CVE-2024-47597` · CVE record: gstreamer gstreamer · CVSS 5.1 Medium · Not analysed yet · Published 11 Dec 2024 · Tags: Memory corruption - [GHSL-2024-244: GStreamer has an OOB-read in FOURCC_SMI\_ parsing](https://agentprime.io/advisories/CVE-2024-47596.md) `CVE-2024-47596` · CVE record: gstreamer gstreamer · CVSS 5.1 Medium · Not analysed yet · Published 11 Dec 2024 · Tags: Memory corruption - [GHSL-2024-243: GStreamer has an integer underflow in extract_cc_from_data leading to OOB-read](https://agentprime.io/advisories/CVE-2024-47546.md) `CVE-2024-47546` · CVE record: gstreamer gstreamer · CVSS 6.9 Medium · Not analysed yet · Published 11 Dec 2024 · Tags: Memory corruption - [GHSL-2024-242: GStreamer has an integer underflow in FOURCC_strf parsing leading to OOB-read](https://agentprime.io/advisories/CVE-2024-47545.md) `CVE-2024-47545` · CVE record: gstreamer gstreamer · CVSS 6.9 Medium · Not analysed yet · Published 11 Dec 2024 · Tags: Memory corruption - [GHSL-2024-238: GStreamer has NULL-pointer dereferences in MP4/MOV demuxer CENC handling](https://agentprime.io/advisories/CVE-2024-47544.md) `CVE-2024-47544` · CVE record: gstreamer gstreamer · CVSS 6.8 Medium · Not analysed yet · Published 11 Dec 2024 · Tags: Memory corruption - [GHSL-2024-236: GStreamer has an OOB-read in qtdemux_parse_container](https://agentprime.io/advisories/CVE-2024-47543.md) `CVE-2024-47543` · CVE record: gstreamer gstreamer · CVSS 5.1 Medium · Not analysed yet · Published 11 Dec 2024 · Tags: Memory corruption - [GHSL-2024-235: GStreamer ID3v2 parser out-of-bounds read and NULL-pointer dereference](https://agentprime.io/advisories/CVE-2024-47542.md) `CVE-2024-47542` · CVE record: gstreamer gstreamer · CVSS 6.8 Medium · Not analysed yet · Published 11 Dec 2024 · Tags: Memory corruption - [GHSL-2024-228: GStreamer has an out-of-bounds write in SSA subtitle parser](https://agentprime.io/advisories/CVE-2024-47541.md) `CVE-2024-47541` · CVE record: gstreamer gstreamer · CVSS 6.9 Medium · Not analysed yet · Published 11 Dec 2024 · Tags: Memory corruption - [GHSL-2024-197: GStreamer uses uninitialized stack memory in Matroska/WebM demuxer](https://agentprime.io/advisories/CVE-2024-47540.md) `CVE-2024-47540` · CVE record: gstreamer gstreamer · CVSS 8.6 High · Not analysed yet · Published 11 Dec 2024 · Tags: Memory corruption - [GHSL-2024-195: GStreamer has an OOB-write in convert_to_s334_1a](https://agentprime.io/advisories/CVE-2024-47539.md) `CVE-2024-47539` · CVE record: gstreamer gstreamer · CVSS 8.6 High · Not analysed yet · Published 11 Dec 2024 · Tags: Memory corruption - [GHSL-2024-115: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packet](https://agentprime.io/advisories/CVE-2024-47538.md) `CVE-2024-47538` · CVE record: gstreamer gstreamer · CVSS 8.6 High · Not analysed yet · Published 11 Dec 2024 · Tags: Memory corruption - [GHSL-2024-094: GStreamer has an OOB-write in isomp4/qtdemux.c](https://agentprime.io/advisories/CVE-2024-47537.md) `CVE-2024-47537` · CVE record: gstreamer gstreamer · CVSS 8.6 High · Not analysed yet · Published 11 Dec 2024 · Tags: Memory corruption - [GStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-0444.md) `CVE-2024-0444` · CVE record: GStreamer GStreamer · CVSS 7.5 High · Not analysed yet · Published 7 Jun 2024 · Tags: Memory corruption - [GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-4453.md) `CVE-2024-4453` · CVE record: GStreamer GStreamer · CVSS 7.8 High · Not analysed yet · Published 22 May 2024 · Tags: Memory corruption - [GStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-50186.md) `CVE-2023-50186` · CVE record: GStreamer GStreamer · CVSS 7.5 High · Not analysed yet · Published 3 May 2024 · Tags: Memory corruption - [GStreamer MXF File Parsing Use-After-Free Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-44446.md) `CVE-2023-44446` · CVE record: GStreamer GStreamer · CVSS 8.8 High · Not analysed yet · Published 3 May 2024 · Tags: Memory corruption - [GStreamer AV1 Codec Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-44429.md) `CVE-2023-44429` · CVE record: GStreamer GStreamer · CVSS 8.8 High · Not analysed yet · Published 3 May 2024 · Tags: Memory corruption - [GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-40476.md) `CVE-2023-40476` · CVE record: GStreamer GStreamer · CVSS 8.8 High · Not analysed yet · Published 3 May 2024 · Tags: Memory corruption - [GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-40475.md) `CVE-2023-40475` · CVE record: GStreamer GStreamer · CVSS 8.8 High · Not analysed yet · Published 3 May 2024 · Tags: Memory corruption - [GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-40474.md) `CVE-2023-40474` · CVE record: GStreamer GStreamer · CVSS 8.8 High · Not analysed yet · Published 3 May 2024 · Tags: Memory corruption - [GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-38104.md) `CVE-2023-38104` · CVE record: GStreamer GStreamer · CVSS 8.8 High · Not analysed yet · Published 3 May 2024 · Tags: Memory corruption - [GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-38103.md) `CVE-2023-38103` · CVE record: GStreamer GStreamer · CVSS 8.8 High · Not analysed yet · Published 3 May 2024 · Tags: Memory corruption - [GStreamer SRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-37329.md) `CVE-2023-37329` · CVE record: GStreamer GStreamer · CVSS 8.8 High · Not analysed yet · Published 3 May 2024 · Tags: Memory corruption Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .