Search CVE reports


Toggle filters

1 – 10 of 48 results


CVE-2025-47808

Medium priority
Needs evaluation

In GStreamer through 1.26.1, the subparse plugin's tmplayer_parse_line function may dereference a NULL pointer while parsing a subtitle file, leading to a crash.

35 affected packages

gst-libav1.0, gst-plugins-bad1.0, gst-plugins-bad1.0-contrib, gst-plugins-base1.0, gst-plugins-good1.0...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gst-libav1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gst-plugins-bad1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gst-plugins-bad1.0-contrib Needs evaluation Needs evaluation
gst-plugins-base1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gst-plugins-good1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gst-plugins-ugly1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gst-python1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gst-rtsp-server1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gstreamer-editing-services1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gstreamer-vaapi Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gstreamer1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
qt-gstreamer Needs evaluation Needs evaluation Needs evaluation Needs evaluation
rust-gst-plugin-version-helper Needs evaluation Not in release
rust-gstreamer Needs evaluation Not in release
rust-gstreamer-allocators Not in release Not in release
rust-gstreamer-allocators-sys Not in release Not in release
rust-gstreamer-audio Needs evaluation Not in release
rust-gstreamer-audio-sys Needs evaluation Needs evaluation Needs evaluation
rust-gstreamer-base Needs evaluation Not in release
rust-gstreamer-base-sys Needs evaluation Needs evaluation Needs evaluation
rust-gstreamer-gl Needs evaluation Not in release
rust-gstreamer-gl-egl Needs evaluation Not in release
rust-gstreamer-gl-egl-sys Needs evaluation Not in release
rust-gstreamer-gl-sys Needs evaluation Not in release
rust-gstreamer-gl-wayland Needs evaluation Not in release
rust-gstreamer-gl-wayland-sys Needs evaluation Not in release
rust-gstreamer-gl-x11 Needs evaluation Not in release
rust-gstreamer-gl-x11-sys Needs evaluation Not in release
rust-gstreamer-pbutils Needs evaluation Not in release
rust-gstreamer-pbutils-sys Needs evaluation Not in release
rust-gstreamer-play Needs evaluation Not in release
rust-gstreamer-play-sys Needs evaluation Not in release
rust-gstreamer-sys Needs evaluation Needs evaluation Needs evaluation
rust-gstreamer-video Needs evaluation Not in release
rust-gstreamer-video-sys Needs evaluation Needs evaluation Needs evaluation
Show all 35 packages Show less packages

CVE-2025-47807

Medium priority
Needs evaluation

In GStreamer through 1.26.1, the subparse plugin's subrip_unescape_formatting function may dereference a NULL pointer while parsing a subtitle file, leading to a crash.

35 affected packages

gst-libav1.0, gst-plugins-bad1.0, gst-plugins-bad1.0-contrib, gst-plugins-base1.0, gst-plugins-good1.0...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gst-libav1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gst-plugins-bad1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gst-plugins-bad1.0-contrib Needs evaluation Needs evaluation
gst-plugins-base1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gst-plugins-good1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gst-plugins-ugly1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gst-python1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gst-rtsp-server1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gstreamer-editing-services1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gstreamer-vaapi Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gstreamer1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
qt-gstreamer Needs evaluation Needs evaluation Needs evaluation Needs evaluation
rust-gst-plugin-version-helper Needs evaluation Not in release
rust-gstreamer Needs evaluation Not in release
rust-gstreamer-allocators Not in release Not in release
rust-gstreamer-allocators-sys Not in release Not in release
rust-gstreamer-audio Needs evaluation Not in release
rust-gstreamer-audio-sys Needs evaluation Needs evaluation Needs evaluation
rust-gstreamer-base Needs evaluation Not in release
rust-gstreamer-base-sys Needs evaluation Needs evaluation Needs evaluation
rust-gstreamer-gl Needs evaluation Not in release
rust-gstreamer-gl-egl Needs evaluation Not in release
rust-gstreamer-gl-egl-sys Needs evaluation Not in release
rust-gstreamer-gl-sys Needs evaluation Not in release
rust-gstreamer-gl-wayland Needs evaluation Not in release
rust-gstreamer-gl-wayland-sys Needs evaluation Not in release
rust-gstreamer-gl-x11 Needs evaluation Not in release
rust-gstreamer-gl-x11-sys Needs evaluation Not in release
rust-gstreamer-pbutils Needs evaluation Not in release
rust-gstreamer-pbutils-sys Needs evaluation Not in release
rust-gstreamer-play Needs evaluation Not in release
rust-gstreamer-play-sys Needs evaluation Not in release
rust-gstreamer-sys Needs evaluation Needs evaluation Needs evaluation
rust-gstreamer-video Needs evaluation Not in release
rust-gstreamer-video-sys Needs evaluation Needs evaluation Needs evaluation
Show all 35 packages Show less packages

CVE-2025-47806

Medium priority
Needs evaluation

In GStreamer through 1.26.1, the subparse plugin's parse_subrip_time function may write data past the bounds of a stack buffer, leading to a crash.

35 affected packages

gst-libav1.0, gst-plugins-bad1.0, gst-plugins-bad1.0-contrib, gst-plugins-base1.0, gst-plugins-good1.0...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gst-libav1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gst-plugins-bad1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gst-plugins-bad1.0-contrib Needs evaluation Needs evaluation
gst-plugins-base1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gst-plugins-good1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gst-plugins-ugly1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gst-python1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gst-rtsp-server1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gstreamer-editing-services1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gstreamer-vaapi Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gstreamer1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
qt-gstreamer Needs evaluation Needs evaluation Needs evaluation Needs evaluation
rust-gst-plugin-version-helper Needs evaluation Not in release
rust-gstreamer Needs evaluation Not in release
rust-gstreamer-allocators Not in release Not in release
rust-gstreamer-allocators-sys Not in release Not in release
rust-gstreamer-audio Needs evaluation Not in release
rust-gstreamer-audio-sys Needs evaluation Needs evaluation Needs evaluation
rust-gstreamer-base Needs evaluation Not in release
rust-gstreamer-base-sys Needs evaluation Needs evaluation Needs evaluation
rust-gstreamer-gl Needs evaluation Not in release
rust-gstreamer-gl-egl Needs evaluation Not in release
rust-gstreamer-gl-egl-sys Needs evaluation Not in release
rust-gstreamer-gl-sys Needs evaluation Not in release
rust-gstreamer-gl-wayland Needs evaluation Not in release
rust-gstreamer-gl-wayland-sys Needs evaluation Not in release
rust-gstreamer-gl-x11 Needs evaluation Not in release
rust-gstreamer-gl-x11-sys Needs evaluation Not in release
rust-gstreamer-pbutils Needs evaluation Not in release
rust-gstreamer-pbutils-sys Needs evaluation Not in release
rust-gstreamer-play Needs evaluation Not in release
rust-gstreamer-play-sys Needs evaluation Not in release
rust-gstreamer-sys Needs evaluation Needs evaluation Needs evaluation
rust-gstreamer-video Needs evaluation Not in release
rust-gstreamer-video-sys Needs evaluation Needs evaluation Needs evaluation
Show all 35 packages Show less packages

CVE-2025-47219

Medium priority
Needs evaluation

In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read past the end of a heap buffer while parsing an MP4 file, possibly leading to information disclosure.

35 affected packages

gst-libav1.0, gst-plugins-bad1.0, gst-plugins-bad1.0-contrib, gst-plugins-base1.0, gst-plugins-good1.0...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gst-libav1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gst-plugins-bad1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gst-plugins-bad1.0-contrib Needs evaluation Needs evaluation
gst-plugins-base1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gst-plugins-good1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gst-plugins-ugly1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gst-python1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gst-rtsp-server1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gstreamer-editing-services1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gstreamer-vaapi Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gstreamer1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
qt-gstreamer Needs evaluation Needs evaluation Needs evaluation Needs evaluation
rust-gst-plugin-version-helper Needs evaluation Not in release
rust-gstreamer Needs evaluation Not in release
rust-gstreamer-allocators Not in release Not in release
rust-gstreamer-allocators-sys Not in release Not in release
rust-gstreamer-audio Needs evaluation Not in release
rust-gstreamer-audio-sys Needs evaluation Needs evaluation Needs evaluation
rust-gstreamer-base Needs evaluation Not in release
rust-gstreamer-base-sys Needs evaluation Needs evaluation Needs evaluation
rust-gstreamer-gl Needs evaluation Not in release
rust-gstreamer-gl-egl Needs evaluation Not in release
rust-gstreamer-gl-egl-sys Needs evaluation Not in release
rust-gstreamer-gl-sys Needs evaluation Not in release
rust-gstreamer-gl-wayland Needs evaluation Not in release
rust-gstreamer-gl-wayland-sys Needs evaluation Not in release
rust-gstreamer-gl-x11 Needs evaluation Not in release
rust-gstreamer-gl-x11-sys Needs evaluation Not in release
rust-gstreamer-pbutils Needs evaluation Not in release
rust-gstreamer-pbutils-sys Needs evaluation Not in release
rust-gstreamer-play Needs evaluation Not in release
rust-gstreamer-play-sys Needs evaluation Not in release
rust-gstreamer-sys Needs evaluation Needs evaluation Needs evaluation
rust-gstreamer-video Needs evaluation Not in release
rust-gstreamer-video-sys Needs evaluation Needs evaluation Needs evaluation
Show all 35 packages Show less packages

CVE-2025-47183

Medium priority
Needs evaluation

In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_tree function may read past the end of a heap buffer while parsing an MP4 file, leading to information disclosure.

35 affected packages

gst-libav1.0, gst-plugins-bad1.0, gst-plugins-bad1.0-contrib, gst-plugins-base1.0, gst-plugins-good1.0...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gst-libav1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gst-plugins-bad1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gst-plugins-bad1.0-contrib Needs evaluation Needs evaluation
gst-plugins-base1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gst-plugins-good1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gst-plugins-ugly1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gst-python1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gst-rtsp-server1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gstreamer-editing-services1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gstreamer-vaapi Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gstreamer1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
qt-gstreamer Needs evaluation Needs evaluation Needs evaluation Needs evaluation
rust-gst-plugin-version-helper Needs evaluation Not in release
rust-gstreamer Needs evaluation Not in release
rust-gstreamer-allocators Not in release Not in release
rust-gstreamer-allocators-sys Not in release Not in release
rust-gstreamer-audio Needs evaluation Not in release
rust-gstreamer-audio-sys Needs evaluation Needs evaluation Needs evaluation
rust-gstreamer-base Needs evaluation Not in release
rust-gstreamer-base-sys Needs evaluation Needs evaluation Needs evaluation
rust-gstreamer-gl Needs evaluation Not in release
rust-gstreamer-gl-egl Needs evaluation Not in release
rust-gstreamer-gl-egl-sys Needs evaluation Not in release
rust-gstreamer-gl-sys Needs evaluation Not in release
rust-gstreamer-gl-wayland Needs evaluation Not in release
rust-gstreamer-gl-wayland-sys Needs evaluation Not in release
rust-gstreamer-gl-x11 Needs evaluation Not in release
rust-gstreamer-gl-x11-sys Needs evaluation Not in release
rust-gstreamer-pbutils Needs evaluation Not in release
rust-gstreamer-pbutils-sys Needs evaluation Not in release
rust-gstreamer-play Needs evaluation Not in release
rust-gstreamer-play-sys Needs evaluation Not in release
rust-gstreamer-sys Needs evaluation Needs evaluation Needs evaluation
rust-gstreamer-video Needs evaluation Not in release
rust-gstreamer-video-sys Needs evaluation Needs evaluation Needs evaluation
Show all 35 packages Show less packages

CVE-2024-47834

Medium priority

Some fixes available 4 of 7

GStreamer is a library for constructing graphs of media-handling components. An Use-After-Free read vulnerability has been discovered affecting the processing of CodecPrivate elements in Matroska streams. In the...

2 affected packages

gst-plugins-good0.10, gst-plugins-good1.0

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gst-plugins-good0.10 Not in release Not in release Not in release
gst-plugins-good1.0 Fixed Fixed Fixed Needs evaluation
Show less packages

CVE-2024-47778

Medium priority

Some fixes available 4 of 7

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in gst_wavparse_adtl_chunk within gstwavparse.c. This vulnerability arises due to insufficient validation...

2 affected packages

gst-plugins-good0.10, gst-plugins-good1.0

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gst-plugins-good0.10 Not in release Not in release Not in release
gst-plugins-good1.0 Fixed Fixed Fixed Needs evaluation
Show less packages

CVE-2024-47777

Medium priority

Some fixes available 4 of 7

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identified in the gst_wavparse_smpl_chunk function within gstwavparse.c. This function attempts to read 4 bytes from...

2 affected packages

gst-plugins-good0.10, gst-plugins-good1.0

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gst-plugins-good0.10 Not in release Not in release Not in release
gst-plugins-good1.0 Fixed Fixed Fixed Needs evaluation
Show less packages

CVE-2024-47776

Medium priority

Some fixes available 4 of 7

GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in gst_wavparse_cue_chunk within gstwavparse.c. The vulnerability happens due to a discrepancy between the size of the...

2 affected packages

gst-plugins-good0.10, gst-plugins-good1.0

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gst-plugins-good0.10 Not in release Not in release Not in release
gst-plugins-good1.0 Fixed Fixed Fixed Needs evaluation
Show less packages

CVE-2024-47775

Medium priority

Some fixes available 4 of 7

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been found in the parse_ds64 function within gstwavparse.c. The parse_ds64 function does not check that the buffer buf...

2 affected packages

gst-plugins-good0.10, gst-plugins-good1.0

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gst-plugins-good0.10 Not in release Not in release Not in release
gst-plugins-good1.0 Fixed Fixed Fixed Needs evaluation
Show less packages