Search CVE reports

1 – 10 of 23 results

Detailed view

Sort by:

CVE-2025-6663

Medium priority

Needs evaluation

GStreamer H266 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this...

1 affected package

gst-plugins-bad1.0

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
gst-plugins-bad1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation

CVE-2025-47808

Medium priority

Needs evaluation

In GStreamer through 1.26.1, the subparse plugin’s tmplayer_parse_line function may dereference a NULL pointer while parsing a subtitle file, leading to a crash.

35 affected packages

gst-libav1.0, gst-plugins-bad1.0, gst-plugins-bad1.0-contrib, gst-plugins-base1.0, gst-plugins-good1.0...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
gst-libav1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gst-plugins-bad1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gst-plugins-bad1.0-contrib	Needs evaluation	Needs evaluation	—	—
gst-plugins-base1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gst-plugins-good1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gst-plugins-ugly1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gst-python1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gst-rtsp-server1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gstreamer-editing-services1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gstreamer-vaapi	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gstreamer1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
qt-gstreamer	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
rust-gst-plugin-version-helper	Needs evaluation	Not in release	—	—
rust-gstreamer	Needs evaluation	Not in release	—	—
rust-gstreamer-allocators	Not in release	Not in release	—	—
rust-gstreamer-allocators-sys	Not in release	Not in release	—	—
rust-gstreamer-audio	Needs evaluation	Not in release	—	—
rust-gstreamer-audio-sys	Needs evaluation	Needs evaluation	Needs evaluation	—
rust-gstreamer-base	Needs evaluation	Not in release	—	—
rust-gstreamer-base-sys	Needs evaluation	Needs evaluation	Needs evaluation	—
rust-gstreamer-gl	Needs evaluation	Not in release	—	—
rust-gstreamer-gl-egl	Needs evaluation	Not in release	—	—
rust-gstreamer-gl-egl-sys	Needs evaluation	Not in release	—	—
rust-gstreamer-gl-sys	Needs evaluation	Not in release	—	—
rust-gstreamer-gl-wayland	Needs evaluation	Not in release	—	—
rust-gstreamer-gl-wayland-sys	Needs evaluation	Not in release	—	—
rust-gstreamer-gl-x11	Needs evaluation	Not in release	—	—
rust-gstreamer-gl-x11-sys	Needs evaluation	Not in release	—	—
rust-gstreamer-pbutils	Needs evaluation	Not in release	—	—
rust-gstreamer-pbutils-sys	Needs evaluation	Not in release	—	—
rust-gstreamer-play	Needs evaluation	Not in release	—	—
rust-gstreamer-play-sys	Needs evaluation	Not in release	—	—
rust-gstreamer-sys	Needs evaluation	Needs evaluation	Needs evaluation	—
rust-gstreamer-video	Needs evaluation	Not in release	—	—
rust-gstreamer-video-sys	Needs evaluation	Needs evaluation	Needs evaluation	—

CVE-2025-47807

Medium priority

Needs evaluation

In GStreamer through 1.26.1, the subparse plugin’s subrip_unescape_formatting function may dereference a NULL pointer while parsing a subtitle file, leading to a crash.

35 affected packages

gst-libav1.0, gst-plugins-bad1.0, gst-plugins-bad1.0-contrib, gst-plugins-base1.0, gst-plugins-good1.0...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
gst-libav1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gst-plugins-bad1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gst-plugins-bad1.0-contrib	Needs evaluation	Needs evaluation	—	—
gst-plugins-base1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gst-plugins-good1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gst-plugins-ugly1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gst-python1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gst-rtsp-server1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gstreamer-editing-services1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gstreamer-vaapi	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gstreamer1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
qt-gstreamer	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
rust-gst-plugin-version-helper	Needs evaluation	Not in release	—	—
rust-gstreamer	Needs evaluation	Not in release	—	—
rust-gstreamer-allocators	Not in release	Not in release	—	—
rust-gstreamer-allocators-sys	Not in release	Not in release	—	—
rust-gstreamer-audio	Needs evaluation	Not in release	—	—
rust-gstreamer-audio-sys	Needs evaluation	Needs evaluation	Needs evaluation	—
rust-gstreamer-base	Needs evaluation	Not in release	—	—
rust-gstreamer-base-sys	Needs evaluation	Needs evaluation	Needs evaluation	—
rust-gstreamer-gl	Needs evaluation	Not in release	—	—
rust-gstreamer-gl-egl	Needs evaluation	Not in release	—	—
rust-gstreamer-gl-egl-sys	Needs evaluation	Not in release	—	—
rust-gstreamer-gl-sys	Needs evaluation	Not in release	—	—
rust-gstreamer-gl-wayland	Needs evaluation	Not in release	—	—
rust-gstreamer-gl-wayland-sys	Needs evaluation	Not in release	—	—
rust-gstreamer-gl-x11	Needs evaluation	Not in release	—	—
rust-gstreamer-gl-x11-sys	Needs evaluation	Not in release	—	—
rust-gstreamer-pbutils	Needs evaluation	Not in release	—	—
rust-gstreamer-pbutils-sys	Needs evaluation	Not in release	—	—
rust-gstreamer-play	Needs evaluation	Not in release	—	—
rust-gstreamer-play-sys	Needs evaluation	Not in release	—	—
rust-gstreamer-sys	Needs evaluation	Needs evaluation	Needs evaluation	—
rust-gstreamer-video	Needs evaluation	Not in release	—	—
rust-gstreamer-video-sys	Needs evaluation	Needs evaluation	Needs evaluation	—

CVE-2025-47806

Medium priority

Needs evaluation

In GStreamer through 1.26.1, the subparse plugin’s parse_subrip_time function may write data past the bounds of a stack buffer, leading to a crash.

35 affected packages

gst-libav1.0, gst-plugins-bad1.0, gst-plugins-bad1.0-contrib, gst-plugins-base1.0, gst-plugins-good1.0...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
gst-libav1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gst-plugins-bad1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gst-plugins-bad1.0-contrib	Needs evaluation	Needs evaluation	—	—
gst-plugins-base1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gst-plugins-good1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gst-plugins-ugly1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gst-python1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gst-rtsp-server1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gstreamer-editing-services1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gstreamer-vaapi	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gstreamer1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
qt-gstreamer	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
rust-gst-plugin-version-helper	Needs evaluation	Not in release	—	—
rust-gstreamer	Needs evaluation	Not in release	—	—
rust-gstreamer-allocators	Not in release	Not in release	—	—
rust-gstreamer-allocators-sys	Not in release	Not in release	—	—
rust-gstreamer-audio	Needs evaluation	Not in release	—	—
rust-gstreamer-audio-sys	Needs evaluation	Needs evaluation	Needs evaluation	—
rust-gstreamer-base	Needs evaluation	Not in release	—	—
rust-gstreamer-base-sys	Needs evaluation	Needs evaluation	Needs evaluation	—
rust-gstreamer-gl	Needs evaluation	Not in release	—	—
rust-gstreamer-gl-egl	Needs evaluation	Not in release	—	—
rust-gstreamer-gl-egl-sys	Needs evaluation	Not in release	—	—
rust-gstreamer-gl-sys	Needs evaluation	Not in release	—	—
rust-gstreamer-gl-wayland	Needs evaluation	Not in release	—	—
rust-gstreamer-gl-wayland-sys	Needs evaluation	Not in release	—	—
rust-gstreamer-gl-x11	Needs evaluation	Not in release	—	—
rust-gstreamer-gl-x11-sys	Needs evaluation	Not in release	—	—
rust-gstreamer-pbutils	Needs evaluation	Not in release	—	—
rust-gstreamer-pbutils-sys	Needs evaluation	Not in release	—	—
rust-gstreamer-play	Needs evaluation	Not in release	—	—
rust-gstreamer-play-sys	Needs evaluation	Not in release	—	—
rust-gstreamer-sys	Needs evaluation	Needs evaluation	Needs evaluation	—
rust-gstreamer-video	Needs evaluation	Not in release	—	—
rust-gstreamer-video-sys	Needs evaluation	Needs evaluation	Needs evaluation	—

CVE-2025-47219

Medium priority

Needs evaluation

In GStreamer through 1.26.1, the isomp4 plugin’s qtdemux_parse_trak function may read past the end of a heap buffer while parsing an MP4 file, possibly leading to information disclosure.

35 affected packages

gst-libav1.0, gst-plugins-bad1.0, gst-plugins-bad1.0-contrib, gst-plugins-base1.0, gst-plugins-good1.0...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
gst-libav1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gst-plugins-bad1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gst-plugins-bad1.0-contrib	Needs evaluation	Needs evaluation	—	—
gst-plugins-base1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gst-plugins-good1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gst-plugins-ugly1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gst-python1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gst-rtsp-server1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gstreamer-editing-services1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gstreamer-vaapi	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gstreamer1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
qt-gstreamer	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
rust-gst-plugin-version-helper	Needs evaluation	Not in release	—	—
rust-gstreamer	Needs evaluation	Not in release	—	—
rust-gstreamer-allocators	Not in release	Not in release	—	—
rust-gstreamer-allocators-sys	Not in release	Not in release	—	—
rust-gstreamer-audio	Needs evaluation	Not in release	—	—
rust-gstreamer-audio-sys	Needs evaluation	Needs evaluation	Needs evaluation	—
rust-gstreamer-base	Needs evaluation	Not in release	—	—
rust-gstreamer-base-sys	Needs evaluation	Needs evaluation	Needs evaluation	—
rust-gstreamer-gl	Needs evaluation	Not in release	—	—
rust-gstreamer-gl-egl	Needs evaluation	Not in release	—	—
rust-gstreamer-gl-egl-sys	Needs evaluation	Not in release	—	—
rust-gstreamer-gl-sys	Needs evaluation	Not in release	—	—
rust-gstreamer-gl-wayland	Needs evaluation	Not in release	—	—
rust-gstreamer-gl-wayland-sys	Needs evaluation	Not in release	—	—
rust-gstreamer-gl-x11	Needs evaluation	Not in release	—	—
rust-gstreamer-gl-x11-sys	Needs evaluation	Not in release	—	—
rust-gstreamer-pbutils	Needs evaluation	Not in release	—	—
rust-gstreamer-pbutils-sys	Needs evaluation	Not in release	—	—
rust-gstreamer-play	Needs evaluation	Not in release	—	—
rust-gstreamer-play-sys	Needs evaluation	Not in release	—	—
rust-gstreamer-sys	Needs evaluation	Needs evaluation	Needs evaluation	—
rust-gstreamer-video	Needs evaluation	Not in release	—	—
rust-gstreamer-video-sys	Needs evaluation	Needs evaluation	Needs evaluation	—

CVE-2025-47183

Medium priority

Needs evaluation

In GStreamer through 1.26.1, the isomp4 plugin’s qtdemux_parse_tree function may read past the end of a heap buffer while parsing an MP4 file, leading to information disclosure.

35 affected packages

gst-libav1.0, gst-plugins-bad1.0, gst-plugins-bad1.0-contrib, gst-plugins-base1.0, gst-plugins-good1.0...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
gst-libav1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gst-plugins-bad1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gst-plugins-bad1.0-contrib	Needs evaluation	Needs evaluation	—	—
gst-plugins-base1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gst-plugins-good1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gst-plugins-ugly1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gst-python1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gst-rtsp-server1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gstreamer-editing-services1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gstreamer-vaapi	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gstreamer1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
qt-gstreamer	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
rust-gst-plugin-version-helper	Needs evaluation	Not in release	—	—
rust-gstreamer	Needs evaluation	Not in release	—	—
rust-gstreamer-allocators	Not in release	Not in release	—	—
rust-gstreamer-allocators-sys	Not in release	Not in release	—	—
rust-gstreamer-audio	Needs evaluation	Not in release	—	—
rust-gstreamer-audio-sys	Needs evaluation	Needs evaluation	Needs evaluation	—
rust-gstreamer-base	Needs evaluation	Not in release	—	—
rust-gstreamer-base-sys	Needs evaluation	Needs evaluation	Needs evaluation	—
rust-gstreamer-gl	Needs evaluation	Not in release	—	—
rust-gstreamer-gl-egl	Needs evaluation	Not in release	—	—
rust-gstreamer-gl-egl-sys	Needs evaluation	Not in release	—	—
rust-gstreamer-gl-sys	Needs evaluation	Not in release	—	—
rust-gstreamer-gl-wayland	Needs evaluation	Not in release	—	—
rust-gstreamer-gl-wayland-sys	Needs evaluation	Not in release	—	—
rust-gstreamer-gl-x11	Needs evaluation	Not in release	—	—
rust-gstreamer-gl-x11-sys	Needs evaluation	Not in release	—	—
rust-gstreamer-pbutils	Needs evaluation	Not in release	—	—
rust-gstreamer-pbutils-sys	Needs evaluation	Not in release	—	—
rust-gstreamer-play	Needs evaluation	Not in release	—	—
rust-gstreamer-play-sys	Needs evaluation	Not in release	—	—
rust-gstreamer-sys	Needs evaluation	Needs evaluation	Needs evaluation	—
rust-gstreamer-video	Needs evaluation	Not in release	—	—
rust-gstreamer-video-sys	Needs evaluation	Needs evaluation	Needs evaluation	—

CVE-2025-3887

High priority

Some fixes available 5 of 7

GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this...

1 affected package

gst-plugins-bad1.0

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
gst-plugins-bad1.0	Fixed	Fixed	Fixed	Vulnerable

CVE-2024-0444

Medium priority

Some fixes available 1 of 2

GStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this...

2 affected packages

gst-plugins-bad0.10, gst-plugins-bad1.0

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
gst-plugins-bad0.10	Not in release	Not in release	Not in release	Not in release
gst-plugins-bad1.0	Not affected	Fixed	Not affected	Not affected

CVE-2023-50186

Medium priority

Some fixes available 1 of 3

2 affected packages

gst-plugins-bad0.10, gst-plugins-bad1.0

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
gst-plugins-bad0.10	Not in release	Not in release	Not in release	—
gst-plugins-bad1.0	Not affected	Fixed	Not affected	Not affected

CVE-2023-44446

Medium priority

Some fixes available 4 of 8

GStreamer MXF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required...

2 affected packages

gst-plugins-bad0.10, gst-plugins-bad1.0

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
gst-plugins-bad0.10	Not in release	Not in release	Not in release	Ignored
gst-plugins-bad1.0	Not affected	Fixed	Fixed	Vulnerable

Export to JSON

Results by page: