Vulnerabilidades en GStreamer
66 resultadosAnálisis Vexday
GStreamer possui 29 vulnerabilidades catalogadas, mas nenhuma sob exploração ativa conhecida (KEV) e sem críticas de CVSS severo, reduzindo o risco imediato. A fraqueza dominante é stack-based buffer overflow (CWE-121), típica de código C/C++ legado, e apenas 2 CVEs foram publicadas nos últimos 90 dias, indicando ritmo moderado de descobertas. O risco permanece contido pelo baixo volume de exploração ativa, mas a natureza dos buffer overflows exige atenção contínua em ambientes que processam streams de origem não-confiável.
CVE-2024-47775MEDIUMGHSL-2024-261: GStreamer has an OOB-read in parse_ds64EPSS 1.2%CVE-2024-47777MEDIUMGHSL-2024-259: GStreamer has an OOB-read in gst_wavparse_smpl_chunkEPSS 1.2%CVE-2024-47596MEDIUMGHSL-2024-244: GStreamer has an OOB-read in FOURCC_SMI_ parsingEPSS 1.1%CVE-2024-47600MEDIUMGHSL-2024-248: GStreamer has an OOB-read in format_channel_maskEPSS 1.1%CVE-2024-47615HIGHGHSL-2024-117: GStreamer has an out-of-bounds write in Ogg demuxerEPSS 1.1%CVE-2024-47542MEDIUMGHSL-2024-235: GStreamer ID3v2 parser out-of-bounds read and NULL-pointer dereferenceEPSS 1.1%CVE-2024-47545MEDIUMGHSL-2024-242: GStreamer has an integer underflow in FOURCC_strf parsing leading to OOB-readEPSS 1.1%CVE-2024-47546MEDIUMGHSL-2024-243: GStreamer has an integer underflow in extract_cc_from_data leading to OOB-readEPSS 1.1%CVE-2024-47544MEDIUMGHSL-2024-238: GStreamer has NULL-pointer dereferences in MP4/MOV demuxer CENC handlingEPSS 1.1%CVE-2024-47835MEDIUMGHSL-2024-263: Gstreamer NULL-pointer dereference in LRC subtitle parserEPSS 1.0%CVE-2024-47540HIGHGHSL-2024-197: GStreamer uses uninitialized stack memory in Matroska/WebM demuxerEPSS 1.0%CVE-2024-47537HIGHGHSL-2024-094: GStreamer has an OOB-write in isomp4/qtdemux.cEPSS 1.0%CVE-2024-47598MEDIUMGHSL-2024-246: GStreamer has an OOB-read in qtdemux_merge_sample_tableEPSS 0.9%CVE-2024-47543MEDIUMGHSL-2024-236: GStreamer has an OOB-read in qtdemux_parse_containerEPSS 0.9%CVE-2024-47602MEDIUMGHSL-2024-250: Streamer NULL-pointer dereferences and out-of-bounds reads in Matroska/WebM demuxerEPSS 0.9%CVE-2024-47834MEDIUMGHSL-2024-280: Gstreamer Use-After-Free read in Matroska CodecPrivateEPSS 0.9%CVE-2024-47613HIGHGHSL-2024-118: GStreamer has a null pointer dereference in gst_gdk_pixbuf_dec_flushEPSS 0.9%CVE-2024-47603MEDIUMGHSL-2024-251: GStreamer NULL-pointer dereference in Matroska/WebM demuxerEPSS 0.9%CVE-2024-47601MEDIUMGHSL-2024-249: GStreamer has a NULL-pointer dereference in Matroska/WebM demuxerEPSS 0.9%CVE-2024-47599MEDIUMGHSL-2024-247: GStreamer Insufficient error handling in JPEG decoder that can lead to NULL-pointer dereferencesEPSS 0.9%