Red Hat Security Advisory

RHSA-2025:7242

gstreamer1-plugins-good security update

Released 2025-05-13 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) gstreamer1-plugins-good-1.22.12-4.el9, gstreamer1-plugins-good-gtk-1.22.12-4.el9

Fixes 17 records

TI-2024-31835 CVE-2024-47546

GHSL-2024-243: GStreamer has an integer underflow in extract_cc_from_data leading to OOB-read

MEDIUM 64

GStreamer is a library for constructing graphs of media-handling components.

CVSS 4.0MEDIUM 6.9 Local No auth No interaction EPSS 0.01083 Published 2024-12-11 Partial fix · 1.24.10 CWE-191

TI-2024-31834 CVE-2024-47545

GHSL-2024-242: GStreamer has an integer underflow in FOURCC_strf parsing leading to OOB-read

MEDIUM 64

GStreamer is a library for constructing graphs of media-handling components.

CVSS 4.0MEDIUM 6.9 Local No auth No interaction EPSS 0.01083 Published 2024-12-11 Partial fix · 1.24.10 CWE-191

TI-2024-31883 CVE-2024-47603

GHSL-2024-251: GStreamer NULL-pointer dereference in Matroska/WebM demuxer

MEDIUM 63

GStreamer is a library for constructing graphs of media-handling components.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00873 Published 2024-12-11 Partial fix · 1.24.10 CWE-476

TI-2024-31882 CVE-2024-47602

GHSL-2024-250: Streamer NULL-pointer dereferences and out-of-bounds reads in Matroska/WebM demuxer

MEDIUM 63

GStreamer is a library for constructing graphs of media-handling components.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00924 Published 2024-12-11 Partial fix · 1.24.10 CWE-125

TI-2024-31881 CVE-2024-47601

GHSL-2024-249: GStreamer has a NULL-pointer dereference in Matroska/WebM demuxer

MEDIUM 63

GStreamer is a library for constructing graphs of media-handling components.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00873 Published 2024-12-11 Partial fix · 1.24.10 CWE-476

TI-2024-31879 CVE-2024-47599

GHSL-2024-247: GStreamer Insufficient error handling in JPEG decoder that can lead to NULL-pointer dereferences

MEDIUM 63

GStreamer is a library for constructing graphs of media-handling components.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00873 Published 2024-12-11 Partial fix · 1.24.10 CWE-476

TI-2024-32101 CVE-2024-47834

GHSL-2024-280: Gstreamer Use-After-Free read in Matroska CodecPrivate

MEDIUM 56

GStreamer is a library for constructing graphs of media-handling components.

CVSS 4.0MEDIUM 5.1 Local No auth No interaction EPSS 0.0092 Published 2024-12-11 Partial fix · 1.24.10 CWE-416

TI-2024-32053 CVE-2024-47778

GHSL-2024-258: GStreamer has an OOB-read in gst_wavparse_adtl_chunk

MEDIUM 56

GStreamer is a library for constructing graphs of media-handling components.

CVSS 4.0MEDIUM 5.1 Local No auth No interaction EPSS 0.0084 Published 2024-12-11 Partial fix · 1.24.10 CWE-125

TI-2024-32052 CVE-2024-47777

GHSL-2024-259: GStreamer has an OOB-read in gst_wavparse_smpl_chunk

MEDIUM 56

GStreamer is a library for constructing graphs of media-handling components.

CVSS 4.0MEDIUM 5.1 Local No auth No interaction EPSS 0.01173 Published 2024-12-11 Partial fix · 1.24.10 CWE-125

TI-2024-32051 CVE-2024-47776

GHSL-2024-260: GStreamer has a OOB-read in gst_wavparse_cue_chunk

MEDIUM 56

GStreamer is a library for constructing graphs of media-handling components.

CVSS 4.0MEDIUM 5.1 Local No auth No interaction EPSS 0.01173 Published 2024-12-11 Partial fix · 1.24.10 CWE-125

TI-2024-32050 CVE-2024-47775

GHSL-2024-261: GStreamer has an OOB-read in parse_ds64

MEDIUM 56

GStreamer is a library for constructing graphs of media-handling components.

CVSS 4.0MEDIUM 5.1 Local No auth No interaction EPSS 0.01173 Published 2024-12-11 Partial fix · 1.24.10 CWE-125

TI-2024-31878 CVE-2024-47598

GHSL-2024-246: GStreamer has an OOB-read in qtdemux_merge_sample_table

MEDIUM 56

GStreamer is a library for constructing graphs of media-handling components.

CVSS 4.0MEDIUM 5.1 Local No auth No interaction EPSS 0.00946 Published 2024-12-11 Partial fix · 1.24.10 CWE-125

TI-2024-31877 CVE-2024-47597

GHSL-2024-245: GStreamer has an OOB-read in qtdemux_parse_samples

MEDIUM 56

GStreamer is a library for constructing graphs of media-handling components.

CVSS 4.0MEDIUM 5.1 Local No auth No interaction EPSS 0.01173 Published 2024-12-11 Partial fix · 1.24.10 CWE-125

TI-2024-31876 CVE-2024-47596

GHSL-2024-244: GStreamer has an OOB-read in FOURCC_SMI_ parsing

MEDIUM 56

GStreamer is a library for constructing graphs of media-handling components.

CVSS 4.0MEDIUM 5.1 Local No auth No interaction EPSS 0.01145 Published 2024-12-11 Partial fix · 1.24.10 CWE-125

TI-2024-31832 CVE-2024-47543

GHSL-2024-236: GStreamer has an OOB-read in qtdemux_parse_container

MEDIUM 56

GStreamer is a library for constructing graphs of media-handling components.

CVSS 4.0MEDIUM 5.1 Local No auth No interaction EPSS 0.00924 Published 2024-12-11 Partial fix · 1.24.10 CWE-125

TI-2024-31833 CVE-2024-47544

GHSL-2024-238: GStreamer has NULL-pointer dereferences in MP4/MOV demuxer CENC handling

LOW 32

GStreamer is a library for constructing graphs of media-handling components.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.01083 Published 2024-12-11 Partial fix · 1.24.10 CWE-476

TI-2024-32049 CVE-2024-47774

GHSL-2024-262: GStreamer has an OOB-read in gst_avi_subtitle_parse_gab2_chunk

LOW 25

GStreamer is a library for constructing graphs of media-handling components.

CVSS 4.0MEDIUM 5.1 Local No auth No interaction EPSS 0.00832 Published 2024-12-11 Partial fix · 1.24.10 CWE-125