Search CVE reports


Toggle filters

1 – 10 of 17 results


CVE-2024-47835

Medium priority

Some fixes available 6 of 7

GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been detected in the parse_lrc function within gstsubparse.c. The parse_lrc function calls strchr() to find...

2 affected packages

gst-plugins-base0.10, gst-plugins-base1.0

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gst-plugins-base0.10 Not in release Not in release Not in release Not in release
gst-plugins-base1.0 Not affected Fixed Fixed Fixed Fixed
Show less packages

CVE-2024-47615

Medium priority

Some fixes available 6 of 7

GStreamer is a library for constructing graphs of media-handling components. An OOB-Write has been detected in the function gst_parse_vorbis_setup_packet within vorbis_parse.c. The integer size is read from the input file without...

2 affected packages

gst-plugins-base0.10, gst-plugins-base1.0

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gst-plugins-base0.10 Not in release Not in release Not in release Not in release
gst-plugins-base1.0 Not affected Fixed Fixed Fixed Fixed
Show less packages

CVE-2024-47607

Medium priority

Some fixes available 6 of 7

GStreamer is a library for constructing graphs of media-handling components. stack-buffer overflow has been detected in the gst_opus_dec_parse_header function within `gstopusdec.c'. The pos array is a stack-allocated buffer of...

2 affected packages

gst-plugins-base0.10, gst-plugins-base1.0

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gst-plugins-base0.10 Not in release Not in release Not in release Not in release
gst-plugins-base1.0 Not affected Fixed Fixed Fixed Fixed
Show less packages

CVE-2024-47600

Medium priority

Some fixes available 5 of 6

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been detected in the format_channel_mask function in gst-discoverer.c. The vulnerability affects the local array position,...

2 affected packages

gst-plugins-base0.10, gst-plugins-base1.0

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gst-plugins-base0.10 Not in release Not in release Not in release Not in release
gst-plugins-base1.0 Not affected Fixed Fixed Fixed Fixed
Show less packages

CVE-2024-47542

Medium priority

Some fixes available 6 of 7

GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference has been discovered in the id3v2_read_synch_uint function, located in id3v2.c. If id3v2_read_synch_uint is called with a null...

2 affected packages

gst-plugins-base0.10, gst-plugins-base1.0

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gst-plugins-base0.10 Not in release Not in release Not in release Not in release
gst-plugins-base1.0 Not affected Fixed Fixed Fixed Fixed
Show less packages

CVE-2024-47541

Medium priority

Some fixes available 6 of 7

GStreamer is a library for constructing graphs of media-handling components. An OOB-write vulnerability has been identified in the gst_ssa_parse_remove_override_codes function of the gstssaparse.c file. This function is...

2 affected packages

gst-plugins-base0.10, gst-plugins-base1.0

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gst-plugins-base0.10 Not in release Not in release Not in release Not in release
gst-plugins-base1.0 Not affected Fixed Fixed Fixed Fixed
Show less packages

CVE-2024-47538

Medium priority

Some fixes available 6 of 7

GStreamer is a library for constructing graphs of media-handling components. A stack-buffer overflow has been detected in the `vorbis_handle_identification_packet` function within `gstvorbisdec.c`. The position array is a...

2 affected packages

gst-plugins-base0.10, gst-plugins-base1.0

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gst-plugins-base0.10 Not in release Not in release Not in release Not in release
gst-plugins-base1.0 Not affected Fixed Fixed Fixed Fixed
Show less packages

CVE-2024-4453

Medium priority

Some fixes available 6 of 7

GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is...

2 affected packages

gst-plugins-base0.10, gst-plugins-base1.0

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gst-plugins-base0.10 Not in release Not in release Not in release Not in release
gst-plugins-base1.0 Not affected Fixed Fixed Fixed Fixed
Show less packages

CVE-2023-37328

Medium priority
Fixed

GStreamer PGS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library...

2 affected packages

gst-plugins-base0.10, gst-plugins-base1.0

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gst-plugins-base0.10 Not in release Not in release Not in release Not in release Ignored
gst-plugins-base1.0 Not affected Not affected Fixed Fixed Fixed
Show less packages

CVE-2023-37327

Medium priority
Fixed

GStreamer FLAC File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is...

4 affected packages

gst-plugins-good0.10, gst-plugins-good1.0, gst-plugins-base0.10, gst-plugins-base1.0

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gst-plugins-good0.10 Not in release Not in release Not in release Not in release Ignored
gst-plugins-good1.0 Not affected Not affected Fixed Fixed Ignored
gst-plugins-base0.10 Not in release Not in release Not in release Not in release Ignored
gst-plugins-base1.0 Not affected Not affected Fixed Fixed Fixed
Show less packages