Priority HIGH 70
In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read past the end of a heap buffer while parsing an MP4 file, possibly leading to information disclosure.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00715 · Published 2025-08-07 · Fix deferred CWE-125
Priority HIGH 70
GStreamer is a library for constructing graphs of media-handling components.
CVSS 4.0HIGH 8.6· Local · No auth · No interaction · EPSS 0.01134 · Published 2024-12-11 · Fixed in 1.24.10 CWE-787
Priority HIGH 70
GStreamer is a library for constructing graphs of media-handling components.
CVSS 4.0HIGH 8.6· Local · No auth · No interaction · EPSS 0.00902 · Published 2024-12-11 · Partial fix · 1.24.10 CWE-476
Priority HIGH 70
GStreamer is a library for constructing graphs of media-handling components.
CVSS 4.0HIGH 8.6· Local · No auth · No interaction · EPSS 0.01201 · Published 2024-12-11 · Partial fix · 1.24.10 CWE-121
Priority HIGH 70
GStreamer is a library for constructing graphs of media-handling components.
CVSS 4.0HIGH 8.6· Local · No auth · No interaction · EPSS 0.01007 · Published 2024-12-11 · Partial fix · 1.24.10 CWE-457
Priority HIGH 70
GStreamer is a library for constructing graphs of media-handling components.
CVSS 4.0HIGH 8.6· Local · No auth · No interaction · EPSS 0.01324 · Published 2024-12-11 · Fixed in 1.24.10 CWE-787
Priority HIGH 70
GStreamer is a library for constructing graphs of media-handling components.
CVSS 4.0HIGH 8.6· Local · No auth · No interaction · EPSS 0.01274 · Published 2024-12-11 · Fixed in 1.24.10 CWE-121
Priority MEDIUM 64
GStreamer is a library for constructing graphs of media-handling components.
CVSS 4.0MEDIUM 6.9· Local · No auth · No interaction · EPSS 0.01083 · Published 2024-12-11 · Partial fix · 1.24.10 CWE-191
Priority MEDIUM 64
GStreamer is a library for constructing graphs of media-handling components.
CVSS 4.0MEDIUM 6.9· Local · No auth · No interaction · EPSS 0.01083 · Published 2024-12-11 · Partial fix · 1.24.10 CWE-191
Priority MEDIUM 64
GStreamer is a library for constructing graphs of media-handling components.
CVSS 4.0MEDIUM 6.9· Local · No auth · No interaction · EPSS 0.01337 · Published 2024-12-11 · Partial fix · 1.24.10 CWE-787
Priority MEDIUM 63
GStreamer is a library for constructing graphs of media-handling components.
CVSS 4.0MEDIUM 6.8· Local · No auth · User interaction · EPSS 0.01047 · Published 2024-12-11 · Partial fix · 1.24.10 CWE-476
Priority MEDIUM 63
GStreamer is a library for constructing graphs of media-handling components.
CVSS 4.0MEDIUM 6.8· Local · No auth · User interaction · EPSS 0.00873 · Published 2024-12-11 · Partial fix · 1.24.10 CWE-476
Priority MEDIUM 63
GStreamer is a library for constructing graphs of media-handling components.
CVSS 4.0MEDIUM 6.8· Local · No auth · User interaction · EPSS 0.00924 · Published 2024-12-11 · Partial fix · 1.24.10 CWE-125
Priority MEDIUM 63
GStreamer is a library for constructing graphs of media-handling components.
CVSS 4.0MEDIUM 6.8· Local · No auth · User interaction · EPSS 0.00873 · Published 2024-12-11 · Partial fix · 1.24.10 CWE-476
Priority MEDIUM 63
GStreamer is a library for constructing graphs of media-handling components.
CVSS 4.0MEDIUM 6.8· Local · No auth · User interaction · EPSS 0.00873 · Published 2024-12-11 · Partial fix · 1.24.10 CWE-476
Priority MEDIUM 63
GStreamer is a library for constructing graphs of media-handling components.
CVSS 4.0MEDIUM 6.8· Local · No auth · User interaction · EPSS 0.01106 · Published 2024-12-11 · Partial fix · 1.24.10 CWE-125
Priority MEDIUM 62
In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_tree function may read past the end of a heap buffer while parsing an MP4 file, leading to information disclosure.
CVSS 3.1MEDIUM 6.6· Local · Low privileges · User interaction · EPSS 0.00234 · Published 2025-08-07 · Fix deferred CWE-125
Priority MEDIUM 58
In GStreamer through 1.26.1, the subparse plugin's tmplayer_parse_line function may dereference a NULL pointer while parsing a subtitle file, leading to a crash.
CVSS 3.1MEDIUM 5.6· Network · No auth · No interaction · EPSS 0.00507 · Published 2025-08-07 · Fix deferred CWE-476
Priority MEDIUM 58
In GStreamer through 1.26.1, the subparse plugin's subrip_unescape_formatting function may dereference a NULL pointer while parsing a subtitle file, leading to a crash.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00228 · Published 2025-08-07 · Fix deferred CWE-476
Priority MEDIUM 58
In GStreamer through 1.26.1, the subparse plugin's parse_subrip_time function may write data past the bounds of a stack buffer, leading to a crash.
CVSS 3.1MEDIUM 5.6· Network · No auth · No interaction · EPSS 0.00306 · Published 2025-08-07 · Fix deferred CWE-121
Priority MEDIUM 56
GStreamer is a library for constructing graphs of media-handling components.
CVSS 4.0MEDIUM 5.1· Local · No auth · No interaction · EPSS 0.0092 · Published 2024-12-11 · Partial fix · 1.24.10 CWE-416
Priority MEDIUM 56
GStreamer is a library for constructing graphs of media-handling components.
CVSS 4.0MEDIUM 5.1· Local · No auth · No interaction · EPSS 0.0084 · Published 2024-12-11 · Partial fix · 1.24.10 CWE-125
Priority MEDIUM 56
GStreamer is a library for constructing graphs of media-handling components.
CVSS 4.0MEDIUM 5.1· Local · No auth · No interaction · EPSS 0.01173 · Published 2024-12-11 · Partial fix · 1.24.10 CWE-125
Priority MEDIUM 56
GStreamer is a library for constructing graphs of media-handling components.
CVSS 4.0MEDIUM 5.1· Local · No auth · No interaction · EPSS 0.01173 · Published 2024-12-11 · Partial fix · 1.24.10 CWE-125
Priority MEDIUM 56
GStreamer is a library for constructing graphs of media-handling components.
CVSS 4.0MEDIUM 5.1· Local · No auth · No interaction · EPSS 0.01173 · Published 2024-12-11 · Partial fix · 1.24.10 CWE-125
Load more
THREATIST.IORead the docs