CVEs (110)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
2Gstreamer Gstreamer Project2Gstreamer GstreamerMay 13, 2026 Jan 23, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Integer overflow in the vmnc decoder in the gstreamer allows remote attackers to cause a denial of service (crash) via large width and height values, which triggers a buffer overflow. |
The _parse_pat function in the mpegts parser in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file. |
The gst_mpegts_section_new function in the mpegts decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a too small section. |
4Debian FedoraprojectGstreamer+1 more9Debian Linux Enterprise Linux DesktopEnterprise Linux Eus+6 moreMay 13, 2026 Jan 13, 2017 N/A· v4 4.7 MEDIUM· v3 4.3 MEDIUM· v2 The windows_icon_typefind function in gst-plugins-base in GStreamer before 1.10.2, when G_SLICE is set to always-malloc, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted ico file. |
The gst_decode_chain_free_internal function in the flxdex decoder in gst-plugins-good in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (invalid memory read and crash) via an invalid file, w...Show more |
Off-by-one error in the gst_h264_parse_set_caps function in GStreamer before 1.10.2 allows remote attackers to have unspecified impact via a crafted file, which triggers an out-of-bounds read. |
The FLIC decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via a crafted series of skip and count pairs. |
The flx_decode_chunks function in gst/flx/gstflxdec.c in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted FLIC file. |
6Debian GstreamerGstreamer Project+3 more15Debian Linux Enterprise Linux DesktopEnterprise Linux Eus+12 moreMay 6, 2026 May 14, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 on Linux, allows remote attackers to cause a denial of service (buffer over-read and application c...Show more |
3Canonical GstreamerGstreamer Project3Gstreamer GstreamerUbuntu LinuxApr 23, 2026 Mar 14, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 Integer overflow in the gst_vorbis_tag_add_coverart function (gst-libs/gst/tag/gstvorbistag.c) in vorbistag in gst-plugins-base (aka gstreamer-plugins-base) before 0.10.23 in GStreamer allows context-dependent attackers...Show more |