Advisories · Technology

GStreamer.

Every CVE that names GStreamer among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-111183 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability
- GStreamer
- Memory corruption
Not analysed yet 21 Oct 2026
CVE-2026-18299 CVE record

CVSS 7.8 High

GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability
- GStreamer
- Memory corruption
Not analysed yet 20 Aug 2026
CVE-2026-18298 CVE record

CVSS 7.8 High

GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
- GStreamer
- Memory corruption
Not analysed yet 20 Aug 2026
CVE-2026-18297 CVE record

CVSS 7.8 High

GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- GStreamer
- Memory corruption
Not analysed yet 20 Aug 2026
CVE-2026-18296 CVE record

CVSS 7.8 High

GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
- GStreamer
- Memory corruption
Not analysed yet 20 Aug 2026
CVE-2026-18295 CVE record

CVSS 7.8 High

GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- GStreamer
- Memory corruption
Not analysed yet 20 Aug 2026
CVE-2026-5056 CVE record

CVSS 7.8 High

GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability
- GStreamer
- Memory corruption
Not analysed yet 29 Jul 2026
CVE-2026-3084 CVE record

CVSS 7.8 High

GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability
- GStreamer
- Memory corruption
Not analysed yet 13 Mar 2026
CVE-2026-2921 CVE record

CVSS 7.8 High

GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability
- GStreamer
- Memory corruption
Not analysed yet 13 Mar 2026
CVE-2026-3083 CVE record

CVSS 8.8 High

GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability
- GStreamer
- Memory corruption
- CWE-129
Not analysed yet 13 Mar 2026
CVE-2026-3086 CVE record

CVSS 7.8 High

GStreamer H.266 Codec Parser Out-Of-Bounds Write Remote Code Execution Vulnerability
- GStreamer
- Memory corruption
Not analysed yet 13 Mar 2026
CVE-2026-3085 CVE record

CVSS 8.8 High

GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability
- GStreamer
- Memory corruption
- CWE-1284
Not analysed yet 13 Mar 2026
CVE-2026-3082 CVE record

CVSS 7.8 High

GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability
- GStreamer
- Memory corruption
Not analysed yet 13 Mar 2026
CVE-2026-3081 CVE record

CVSS 7.8 High

GStreamer H.266 Codec Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability
- GStreamer
- Memory corruption
Not analysed yet 13 Mar 2026
CVE-2026-2923 CVE record

CVSS 7.8 High

GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability
- GStreamer
- Memory corruption
Not analysed yet 13 Mar 2026
CVE-2026-2922 CVE record

CVSS 7.8 High

GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution Vulnerability
- GStreamer
- Memory corruption
Not analysed yet 13 Mar 2026
CVE-2026-2920 CVE record

CVSS 7.8 High

GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability
- GStreamer
- Memory corruption
Not analysed yet 13 Mar 2026
CVE-2025-6663 CVE record

CVSS 7.8 High

GStreamer H266 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- GStreamer
- Memory corruption
Not analysed yet 7 Jul 2025
CVE-2025-2759 CVE record

CVSS 7.0 High

GStreamer Incorrect Permission Assignment Local Privilege Escalation Vulnerability
- GStreamer
- Broken access control
Not analysed yet 22 May 2025
CVE-2025-3887 CVE record

CVSS 8.8 High

GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- GStreamer
- Memory corruption
Not analysed yet 22 May 2025
CVE-2024-47834 CVE record

CVSS 5.1 Medium

GHSL-2024-280: Gstreamer Use-After-Free read in Matroska CodecPrivate
- gstreamer
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-47835 CVE record

CVSS 6.8 Medium

GHSL-2024-263: Gstreamer NULL-pointer dereference in LRC subtitle parser
- gstreamer
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-47778 CVE record

CVSS 5.1 Medium

GHSL-2024-258: GStreamer has an OOB-read in gst_wavparse_adtl_chunk
- gstreamer
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-47777 CVE record

CVSS 5.1 Medium

GHSL-2024-259: GStreamer has an OOB-read in gst_wavparse_smpl_chunk
- gstreamer
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-47776 CVE record

CVSS 5.1 Medium

GHSL-2024-260: GStreamer has a OOB-read in gst_wavparse_cue_chunk
- gstreamer
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-47775 CVE record

CVSS 5.1 Medium

GHSL-2024-261: GStreamer has an OOB-read in parse_ds64
- gstreamer
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-47774 CVE record

CVSS 5.1 Medium

GHSL-2024-262: GStreamer has an OOB-read in gst_avi_subtitle_parse_gab2_chunk
- gstreamer
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-47613 CVE record

CVSS 8.6 High

GHSL-2024-118: GStreamer has a null pointer dereference in gst_gdk_pixbuf_dec_flush
- gstreamer
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-47615 CVE record

CVSS 8.6 High

GHSL-2024-117: GStreamer has an out-of-bounds write in Ogg demuxer
- gstreamer
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-47607 CVE record

CVSS 8.6 High

GHSL-2024-116: Stack-buffer overflow in gst_opus_dec_parse_header
- gstreamer
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-47606 CVE record

CVSS 8.6 High

GHSL-2024-166: GStreamer Integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes
- gstreamer
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-47603 CVE record

CVSS 6.8 Medium

GHSL-2024-251: GStreamer NULL-pointer dereference in Matroska/WebM demuxer
- gstreamer
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-47602 CVE record

CVSS 6.8 Medium

GHSL-2024-250: Streamer NULL-pointer dereferences and out-of-bounds reads in Matroska/WebM demuxer
- gstreamer
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-47601 CVE record

CVSS 6.8 Medium

GHSL-2024-249: GStreamer has a NULL-pointer dereference in Matroska/WebM demuxer
- gstreamer
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-47600 CVE record

CVSS 5.1 Medium

GHSL-2024-248: GStreamer has an OOB-read in format_channel_mask
- gstreamer
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-47599 CVE record

CVSS 6.8 Medium

GHSL-2024-247: GStreamer Insufficient error handling in JPEG decoder that can lead to NULL-pointer dereferences
- gstreamer
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-47598 CVE record

CVSS 5.1 Medium

GHSL-2024-246: GStreamer has an OOB-read in qtdemux_merge_sample_table
- gstreamer
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-47597 CVE record

CVSS 5.1 Medium

GHSL-2024-245: GStreamer has an OOB-read in qtdemux_parse_samples
- gstreamer
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-47596 CVE record

CVSS 5.1 Medium

GHSL-2024-244: GStreamer has an OOB-read in FOURCC_SMI_ parsing
- gstreamer
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-47546 CVE record

CVSS 6.9 Medium

GHSL-2024-243: GStreamer has an integer underflow in extract_cc_from_data leading to OOB-read
- gstreamer
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-47545 CVE record

CVSS 6.9 Medium

GHSL-2024-242: GStreamer has an integer underflow in FOURCC_strf parsing leading to OOB-read
- gstreamer
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-47544 CVE record

CVSS 6.8 Medium

GHSL-2024-238: GStreamer has NULL-pointer dereferences in MP4/MOV demuxer CENC handling
- gstreamer
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-47543 CVE record

CVSS 5.1 Medium

GHSL-2024-236: GStreamer has an OOB-read in qtdemux_parse_container
- gstreamer
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-47542 CVE record

CVSS 6.8 Medium

GHSL-2024-235: GStreamer ID3v2 parser out-of-bounds read and NULL-pointer dereference
- gstreamer
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-47541 CVE record

CVSS 6.9 Medium

GHSL-2024-228: GStreamer has an out-of-bounds write in SSA subtitle parser
- gstreamer
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-47540 CVE record

CVSS 8.6 High

GHSL-2024-197: GStreamer uses uninitialized stack memory in Matroska/WebM demuxer
- gstreamer
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-47539 CVE record

CVSS 8.6 High

GHSL-2024-195: GStreamer has an OOB-write in convert_to_s334_1a
- gstreamer
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-47538 CVE record

CVSS 8.6 High

GHSL-2024-115: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packet
- gstreamer
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-47537 CVE record

CVSS 8.6 High

GHSL-2024-094: GStreamer has an OOB-write in isomp4/qtdemux.c
- gstreamer
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-0444 CVE record

CVSS 7.5 High

GStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- GStreamer
- Memory corruption
Not analysed yet 7 Jun 2024
CVE-2024-4453 CVE record

CVSS 7.8 High

GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability
- GStreamer
- Memory corruption
Not analysed yet 22 May 2024
CVE-2023-50186 CVE record

CVSS 7.5 High

GStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- GStreamer
- Memory corruption
Not analysed yet 3 May 2024
CVE-2023-44446 CVE record

CVSS 8.8 High

GStreamer MXF File Parsing Use-After-Free Remote Code Execution Vulnerability
- GStreamer
- Memory corruption
Not analysed yet 3 May 2024
CVE-2023-44429 CVE record

CVSS 8.8 High

GStreamer AV1 Codec Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
- GStreamer
- Memory corruption
Not analysed yet 3 May 2024
CVE-2023-40476 CVE record

CVSS 8.8 High

GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- GStreamer
- Memory corruption
Not analysed yet 3 May 2024
CVE-2023-40475 CVE record

CVSS 8.8 High

GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability
- GStreamer
- Memory corruption
Not analysed yet 3 May 2024
CVE-2023-40474 CVE record

CVSS 8.8 High

GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability
- GStreamer
- Memory corruption
Not analysed yet 3 May 2024
CVE-2023-38104 CVE record

CVSS 8.8 High

GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability
- GStreamer
- Memory corruption
Not analysed yet 3 May 2024
CVE-2023-38103 CVE record

CVSS 8.8 High

GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability
- GStreamer
- Memory corruption
Not analysed yet 3 May 2024
CVE-2023-37329 CVE record

CVSS 8.8 High

GStreamer SRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
- GStreamer
- Memory corruption
Not analysed yet 3 May 2024