Read the docs
TI-2016-07719 Aliases CVE-2016-9447GHSA-653c-g2jf-pf9x

The ROM mappings in the NSF decoder in gstreamer 0.10.x allow remote attackers to cause a…

Priority LOW 39CWE-125Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 12 fixed, 1 without a fix

Attack profile from CVSS 3.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-787 and the CVSS impact.

Summary

The ROM mappings in the NSF decoder in gstreamer 0.10.x allow remote attackers to cause a denial of service (out-of-bounds read or write) and possibly execute arbitrary code via a crafted NSF music file.

Why it matters now

EPSS 0.02839 86th percentileScored 2026-11-07
Fix Partial Red Hat: 2 advisoriesRed Hat: 12 fixed, 1 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 37

CPEVersionsRoleVendor
cpe:2.3:a:gstreamer:gstreamer:0.10.0:*:*:*:*:*:*:*0.10.0VulnerableGStreamer
cpe:2.3:a:gstreamer:gstreamer:0.10.1:*:*:*:*:*:*:*0.10.1VulnerableGStreamer
cpe:2.3:a:gstreamer:gstreamer:0.10.2:*:*:*:*:*:*:*0.10.2VulnerableGStreamer
cpe:2.3:a:gstreamer:gstreamer:0.10.3:*:*:*:*:*:*:*0.10.3VulnerableGStreamer
cpe:2.3:a:gstreamer:gstreamer:0.10.4:*:*:*:*:*:*:*0.10.4VulnerableGStreamer
cpe:2.3:a:gstreamer:gstreamer:0.10.5:*:*:*:*:*:*:*0.10.5VulnerableGStreamer
cpe:2.3:a:gstreamer:gstreamer:0.10.6:*:*:*:*:*:*:*0.10.6VulnerableGStreamer
cpe:2.3:a:gstreamer:gstreamer:0.10.7:*:*:*:*:*:*:*0.10.7VulnerableGStreamer
cpe:2.3:a:gstreamer:gstreamer:0.10.8:*:*:*:*:*:*:*0.10.8VulnerableGStreamer
cpe:2.3:a:gstreamer:gstreamer:0.10.9:*:*:*:*:*:*:*0.10.9VulnerableGStreamer
  • cpe:2.3:a:gstreamer:gstreamer:0.10.0:*:*:*:*:*:*:* Versions 0.10.0 Vulnerable ·GStreamer
  • cpe:2.3:a:gstreamer:gstreamer:0.10.1:*:*:*:*:*:*:* Versions 0.10.1 Vulnerable ·GStreamer
  • cpe:2.3:a:gstreamer:gstreamer:0.10.2:*:*:*:*:*:*:* Versions 0.10.2 Vulnerable ·GStreamer
  • cpe:2.3:a:gstreamer:gstreamer:0.10.3:*:*:*:*:*:*:* Versions 0.10.3 Vulnerable ·GStreamer
  • cpe:2.3:a:gstreamer:gstreamer:0.10.4:*:*:*:*:*:*:* Versions 0.10.4 Vulnerable ·GStreamer
  • cpe:2.3:a:gstreamer:gstreamer:0.10.5:*:*:*:*:*:*:* Versions 0.10.5 Vulnerable ·GStreamer
  • cpe:2.3:a:gstreamer:gstreamer:0.10.6:*:*:*:*:*:*:* Versions 0.10.6 Vulnerable ·GStreamer
  • cpe:2.3:a:gstreamer:gstreamer:0.10.7:*:*:*:*:*:*:* Versions 0.10.7 Vulnerable ·GStreamer
  • cpe:2.3:a:gstreamer:gstreamer:0.10.8:*:*:*:*:*:*:* Versions 0.10.8 Vulnerable ·GStreamer
  • cpe:2.3:a:gstreamer:gstreamer:0.10.9:*:*:*:*:*:*:* Versions 0.10.9 Vulnerable ·GStreamer
Show 27 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:gstreamer:gstreamer:0.10.10:*:*:*:*:*:*:*0.10.10VulnerableGStreamer
cpe:2.3:a:gstreamer:gstreamer:0.10.11:*:*:*:*:*:*:*0.10.11VulnerableGStreamer
cpe:2.3:a:gstreamer:gstreamer:0.10.12:*:*:*:*:*:*:*0.10.12VulnerableGStreamer
cpe:2.3:a:gstreamer:gstreamer:0.10.13:*:*:*:*:*:*:*0.10.13VulnerableGStreamer
cpe:2.3:a:gstreamer:gstreamer:0.10.14:*:*:*:*:*:*:*0.10.14VulnerableGStreamer
cpe:2.3:a:gstreamer:gstreamer:0.10.15:*:*:*:*:*:*:*0.10.15VulnerableGStreamer
cpe:2.3:a:gstreamer:gstreamer:0.10.16:*:*:*:*:*:*:*0.10.16VulnerableGStreamer
cpe:2.3:a:gstreamer:gstreamer:0.10.17:*:*:*:*:*:*:*0.10.17VulnerableGStreamer
cpe:2.3:a:gstreamer:gstreamer:0.10.18:*:*:*:*:*:*:*0.10.18VulnerableGStreamer
cpe:2.3:a:gstreamer:gstreamer:0.10.19:*:*:*:*:*:*:*0.10.19VulnerableGStreamer
cpe:2.3:a:gstreamer:gstreamer:0.10.20:*:*:*:*:*:*:*0.10.20VulnerableGStreamer
cpe:2.3:a:gstreamer:gstreamer:0.10.21:*:*:*:*:*:*:*0.10.21VulnerableGStreamer
cpe:2.3:a:gstreamer:gstreamer:0.10.22:*:*:*:*:*:*:*0.10.22VulnerableGStreamer
cpe:2.3:a:gstreamer:gstreamer:0.10.23:*:*:*:*:*:*:*0.10.23VulnerableGStreamer
cpe:2.3:a:gstreamer:gstreamer:0.10.24:*:*:*:*:*:*:*0.10.24VulnerableGStreamer
cpe:2.3:a:gstreamer:gstreamer:0.10.25:*:*:*:*:*:*:*0.10.25VulnerableGStreamer
cpe:2.3:a:gstreamer:gstreamer:0.10.26:*:*:*:*:*:*:*0.10.26VulnerableGStreamer
cpe:2.3:a:gstreamer:gstreamer:0.10.27:*:*:*:*:*:*:*0.10.27VulnerableGStreamer
cpe:2.3:a:gstreamer:gstreamer:0.10.28:*:*:*:*:*:*:*0.10.28VulnerableGStreamer
cpe:2.3:a:gstreamer:gstreamer:0.10.29:*:*:*:*:*:*:*0.10.29VulnerableGStreamer
cpe:2.3:a:gstreamer:gstreamer:0.10.30:*:*:*:*:*:*:*0.10.30VulnerableGStreamer
cpe:2.3:a:gstreamer:gstreamer:0.10.31:*:*:*:*:*:*:*0.10.31VulnerableGStreamer
cpe:2.3:a:gstreamer:gstreamer:0.10.32:*:*:*:*:*:*:*0.10.32VulnerableGStreamer
cpe:2.3:a:gstreamer:gstreamer:0.10.33:*:*:*:*:*:*:*0.10.33VulnerableGStreamer
cpe:2.3:a:gstreamer:gstreamer:0.10.34:*:*:*:*:*:*:*0.10.34VulnerableGStreamer
cpe:2.3:a:gstreamer:gstreamer:0.10.35:*:*:*:*:*:*:*0.10.35VulnerableGStreamer
cpe:2.3:a:gstreamer:gstreamer:0.10.36:*:*:*:*:*:*:*0.10.36VulnerableGStreamer
  • cpe:2.3:a:gstreamer:gstreamer:0.10.10:*:*:*:*:*:*:* Versions 0.10.10 Vulnerable ·GStreamer
  • cpe:2.3:a:gstreamer:gstreamer:0.10.11:*:*:*:*:*:*:* Versions 0.10.11 Vulnerable ·GStreamer
  • cpe:2.3:a:gstreamer:gstreamer:0.10.12:*:*:*:*:*:*:* Versions 0.10.12 Vulnerable ·GStreamer
  • cpe:2.3:a:gstreamer:gstreamer:0.10.13:*:*:*:*:*:*:* Versions 0.10.13 Vulnerable ·GStreamer
  • cpe:2.3:a:gstreamer:gstreamer:0.10.14:*:*:*:*:*:*:* Versions 0.10.14 Vulnerable ·GStreamer
  • cpe:2.3:a:gstreamer:gstreamer:0.10.15:*:*:*:*:*:*:* Versions 0.10.15 Vulnerable ·GStreamer
  • cpe:2.3:a:gstreamer:gstreamer:0.10.16:*:*:*:*:*:*:* Versions 0.10.16 Vulnerable ·GStreamer
  • cpe:2.3:a:gstreamer:gstreamer:0.10.17:*:*:*:*:*:*:* Versions 0.10.17 Vulnerable ·GStreamer
  • cpe:2.3:a:gstreamer:gstreamer:0.10.18:*:*:*:*:*:*:* Versions 0.10.18 Vulnerable ·GStreamer
  • cpe:2.3:a:gstreamer:gstreamer:0.10.19:*:*:*:*:*:*:* Versions 0.10.19 Vulnerable ·GStreamer
  • cpe:2.3:a:gstreamer:gstreamer:0.10.20:*:*:*:*:*:*:* Versions 0.10.20 Vulnerable ·GStreamer
  • cpe:2.3:a:gstreamer:gstreamer:0.10.21:*:*:*:*:*:*:* Versions 0.10.21 Vulnerable ·GStreamer
  • cpe:2.3:a:gstreamer:gstreamer:0.10.22:*:*:*:*:*:*:* Versions 0.10.22 Vulnerable ·GStreamer
  • cpe:2.3:a:gstreamer:gstreamer:0.10.23:*:*:*:*:*:*:* Versions 0.10.23 Vulnerable ·GStreamer
  • cpe:2.3:a:gstreamer:gstreamer:0.10.24:*:*:*:*:*:*:* Versions 0.10.24 Vulnerable ·GStreamer
  • cpe:2.3:a:gstreamer:gstreamer:0.10.25:*:*:*:*:*:*:* Versions 0.10.25 Vulnerable ·GStreamer
  • cpe:2.3:a:gstreamer:gstreamer:0.10.26:*:*:*:*:*:*:* Versions 0.10.26 Vulnerable ·GStreamer
  • cpe:2.3:a:gstreamer:gstreamer:0.10.27:*:*:*:*:*:*:* Versions 0.10.27 Vulnerable ·GStreamer
  • cpe:2.3:a:gstreamer:gstreamer:0.10.28:*:*:*:*:*:*:* Versions 0.10.28 Vulnerable ·GStreamer
  • cpe:2.3:a:gstreamer:gstreamer:0.10.29:*:*:*:*:*:*:* Versions 0.10.29 Vulnerable ·GStreamer
  • cpe:2.3:a:gstreamer:gstreamer:0.10.30:*:*:*:*:*:*:* Versions 0.10.30 Vulnerable ·GStreamer
  • cpe:2.3:a:gstreamer:gstreamer:0.10.31:*:*:*:*:*:*:* Versions 0.10.31 Vulnerable ·GStreamer
  • cpe:2.3:a:gstreamer:gstreamer:0.10.32:*:*:*:*:*:*:* Versions 0.10.32 Vulnerable ·GStreamer
  • cpe:2.3:a:gstreamer:gstreamer:0.10.33:*:*:*:*:*:*:* Versions 0.10.33 Vulnerable ·GStreamer
  • cpe:2.3:a:gstreamer:gstreamer:0.10.34:*:*:*:*:*:*:* Versions 0.10.34 Vulnerable ·GStreamer
  • cpe:2.3:a:gstreamer:gstreamer:0.10.35:*:*:*:*:*:*:* Versions 0.10.35 Vulnerable ·GStreamer
  • cpe:2.3:a:gstreamer:gstreamer:0.10.36:*:*:*:*:*:*:* Versions 0.10.36 Vulnerable ·GStreamer

Remediation

Red Hat 2 advisories

  • RHSA-2017:0018 Released 2017-01-05 · Red Hat rating Moderate
    gstreamer-plugins-bad-free security update
    • Red Hat Enterprise Linux Client (v. 7) gstreamer-plugins-bad-free-0.10.23-22.el7_3
    • Red Hat Enterprise Linux Client Optional (v. 7) gstreamer-plugins-bad-free-devel-0.10.23-22.el7_3, gstreamer-plugins-bad-free-devel-docs-0.10.23-22.el7_3
    • Red Hat Enterprise Linux Server (v. 7) gstreamer-plugins-bad-free-0.10.23-22.el7_3, gstreamer-plugins-bad-free-0.10.23-22.el7_3.ppc
    • Red Hat Enterprise Linux Server Optional (v. 7) gstreamer-plugins-bad-free-devel-0.10.23-22.el7_3, gstreamer-plugins-bad-free-devel-0.10.23-22.el7_3.ppc, gstreamer-plugins-bad-free-devel-docs-0.10.23-22.el7_3
    • Red Hat Enterprise Linux Workstation (v. 7) gstreamer-plugins-bad-free-0.10.23-22.el7_3
    • Red Hat Enterprise Linux Workstation Optional (v. 7) gstreamer-plugins-bad-free-devel-0.10.23-22.el7_3, gstreamer-plugins-bad-free-devel-docs-0.10.23-22.el7_3
  • RHSA-2016:2974 Released 2016-12-21 · Red Hat rating Important
    gstreamer-plugins-bad-free security update
    • Red Hat Enterprise Linux Desktop (v. 6) gstreamer-plugins-bad-free-0.10.19-5.el6_8
    • Red Hat Enterprise Linux Desktop Optional (v. 6) gstreamer-plugins-bad-free-devel-0.10.19-5.el6_8, gstreamer-plugins-bad-free-devel-docs-0.10.19-5.el6_8, gstreamer-plugins-bad-free-extras-0.10.19-5.el6_8
    • Red Hat Enterprise Linux Server (v. 6) gstreamer-plugins-bad-free-0.10.19-5.el6_8, gstreamer-plugins-bad-free-0.10.19-5.el6_8.ppc
    • Red Hat Enterprise Linux Server Optional (v. 6) gstreamer-plugins-bad-free-devel-0.10.19-5.el6_8, gstreamer-plugins-bad-free-devel-0.10.19-5.el6_8.ppc, gstreamer-plugins-bad-free-devel-docs-0.10.19-5.el6_8 +2
    • Red Hat Enterprise Linux Workstation (v. 6) gstreamer-plugins-bad-free-0.10.19-5.el6_8
    • Red Hat Enterprise Linux Workstation Optional (v. 6) gstreamer-plugins-bad-free-devel-0.10.19-5.el6_8, gstreamer-plugins-bad-free-devel-docs-0.10.19-5.el6_8, gstreamer-plugins-bad-free-extras-0.10.19-5.el6_8

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Virtualization 3AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2017:0018
Red Hat Enterprise Linux Client Optional (v. 7)Fixed RHSA-2017:0018
Red Hat Enterprise Linux Desktop (v. 6)Fixed RHSA-2016:2974
Red Hat Enterprise Linux Desktop Optional (v. 6)Fixed RHSA-2016:2974
Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2016:2974
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2017:0018
Red Hat Enterprise Linux Server Optional (v. 6)Fixed RHSA-2016:2974
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2017:0018
Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2016:2974
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2017:0018
Red Hat Enterprise Linux Workstation Optional (v. 6)Fixed RHSA-2016:2974
Red Hat Enterprise Linux Workstation Optional (v. 7)Fixed RHSA-2017:0018
Not affected: 3 products
  • Red Hat Enterprise Linux 5
  • Red Hat Enterprise Linux 6
  • Red Hat Enterprise Linux 7

Timeline

  1. 2026-10-02 Threatist record created from CVE-2016-9447
  2. 2026-10-03 Alias added: GHSA-653c-g2jf-pf9x

References

Advisory 3

Other 3

  • TI-2025-29786 In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read… CVSS 3.1HIGH 8.1
  • TI-2024-31895 GHSL-2024-117: GStreamer has an out-of-bounds write in Ogg demuxer CVSS 4.0HIGH 8.6
  • TI-2024-31893 GHSL-2024-118: GStreamer has a null pointer dereference in gst_gdk_pixbuf_dec_flush CVSS 4.0HIGH 8.6
  • TI-2024-31887 GHSL-2024-116: Stack-buffer overflow in gst_opus_dec_parse_header CVSS 4.0HIGH 8.6
  • TI-2024-31829 GHSL-2024-197: GStreamer uses uninitialized stack memory in Matroska/WebM demuxer CVSS 4.0HIGH 8.6
  • TI-2024-31828 GHSL-2024-195: GStreamer has an OOB-write in convert_to_s334_1a CVSS 4.0HIGH 8.6
See all 109 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences