gstreamer Vulnerability Advisory Catalog

Total 108 security vulnerabilities recorded for gstreamer software and firmware.

← Back to All Vendors
CVE-2016-9811 MEDIUM
Component: gstreamer

The windows_icon_typefind function in gst-plugins-base in GStreamer before 1.10.2, when G_SLICE is set to always-malloc, allows remote attackers to ca...

📅 2017-01-13
CVSS 4.7 Dossier →
CVE-2016-9810 MEDIUM
Component: gstreamer

The gst_decode_chain_free_internal function in the flxdex decoder in gst-plugins-good in GStreamer before 1.10.2 allows remote attackers to cause a de...

📅 2017-01-13
CVSS 5.5 Dossier →
Component: gstreamer

Off-by-one error in the gst_h264_parse_set_caps function in GStreamer before 1.10.2 allows remote attackers to have unspecified impact via a crafted f...

📅 2017-01-13
CVSS 7.8 Dossier →
Component: gstreamer

The FLIC decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via a crafted series ...

📅 2017-01-13
CVSS 7.5 Dossier →
CVE-2016-9807 MEDIUM
Component: gstreamer

The flx_decode_chunks function in gst/flx/gstflxdec.c in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (invalid memory ...

📅 2017-01-13
CVSS 5.5 Dossier →
CVE-2015-0797 UNKNOWN
Component: gstreamer

GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 on Linux, allows remote atta...

📅 2015-05-14
CVSS 6.8 Dossier →
CVE-2009-1932 UNKNOWN
Component: good_plug-ins

Multiple integer overflows in the (1) user_info_callback, (2) user_endrow_callback, and (3) gst_pngdec_task functions (ext/libpng/gstpngdec.c) in GStr...

📅 2009-06-04
CVSS 6.8 Dossier →
CVE-2009-0586 UNKNOWN
Component: gstreamer

Integer overflow in the gst_vorbis_tag_add_coverart function (gst-libs/gst/tag/gstvorbistag.c) in vorbistag in gst-plugins-base (aka gstreamer-plugins...

📅 2009-03-14
CVSS 7.5 Dossier →
CVE-2009-0398 UNKNOWN
Component: plug-ins

Array index error in the gst_qtp_trak_handler function in gst/qtdemux/qtdemux.c in GStreamer Plug-ins (aka gstreamer-plugins) 0.6.0 allows remote atta...

📅 2009-02-03
CVSS 9.3 Dossier →
CVE-2009-0397 UNKNOWN
Component: good_plug-ins

Heap-based buffer overflow in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 thr...

📅 2009-02-03
CVSS 9.3 Dossier →
CVE-2009-0387 UNKNOWN
Component: good_plug-ins

Array index error in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 through 0.10...

📅 2009-02-02
CVSS 9.3 Dossier →
CVE-2009-0386 UNKNOWN
Component: good_plug-ins

Heap-based buffer overflow in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 thr...

📅 2009-02-02
CVSS 9.3 Dossier →
Page 5 of 5 (108 Total Records)