Vulnerabilities

GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability.

GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.

GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.

GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.

GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.

A flaw was found in GStreamer gst-plugins-good (avidemux).

A flaw was found in GStreamer gst-plugins-good (avidemux).

A flaw was found in GStreamer's gst-plugins-bad package.

A flaw was found in the GStreamer gst-plugins-bad package.

An incomplete fix for CVE-2024-47778 allows an out-of-bounds read in gst_wavparse_adtl_chunk() function.

GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability.

GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability.

GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability.

GStreamer H.266 Codec Parser Out-Of-Bounds Write Remote Code Execution Vulnerability.

GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability.

GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability.

GStreamer H.266 Codec Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability.

GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability.

GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution Vulnerability.

GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability.

In GStreamer through 1.26.1, the subparse plugin's tmplayer_parse_line function may dereference a NULL pointer while parsing a subtitle file, leading to a crash.

In GStreamer through 1.26.1, the subparse plugin's subrip_unescape_formatting function may dereference a NULL pointer while parsing a subtitle file, leading to a crash.

In GStreamer through 1.26.1, the subparse plugin's parse_subrip_time function may write data past the bounds of a stack buffer, leading to a crash.

In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read past the end of a heap buffer while parsing an MP4 file, possibly leading to information disclosure.

In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_tree function may read past the end of a heap buffer while parsing an MP4 file, leading to information disclosure.