Vulnerabilities in GStreamer
66 resultsVexday analysis
GStreamer possui 29 vulnerabilidades catalogadas, mas nenhuma sob exploração ativa conhecida (KEV) e sem críticas de CVSS severo, reduzindo o risco imediato. A fraqueza dominante é stack-based buffer overflow (CWE-121), típica de código C/C++ legado, e apenas 2 CVEs foram publicadas nos últimos 90 dias, indicando ritmo moderado de descobertas. O risco permanece contido pelo baixo volume de exploração ativa, mas a natureza dos buffer overflows exige atenção contínua em ambientes que processam streams de origem não-confiável.
CVE-2026-46470MEDIUMAn issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_audio_caps fEPSS 0.2%CVE-2026-18299HIGHGStreamer rtpsbcdepay Use-After-Free Remote Code Execution VulnerabilityEPSS 0.2%CVE-2026-73433MEDIUMGstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux fujifilm strd parsing leading to out-of-bounds read/writeEPSS 0.1%CVE-2026-73434MEDIUMGstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsingEPSS 0.1%CVE-2025-2759HIGHGStreamer Incorrect Permission Assignment Local Privilege Escalation VulnerabilityEPSS 0.1%CVE-2026-46469MEDIUMAn issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_parse_trak fEPSS 0.1%