Vulnerabilidades en GStreamer
66 resultadosAnálisis Vexday
GStreamer possui 29 vulnerabilidades catalogadas, mas nenhuma sob exploração ativa conhecida (KEV) e sem críticas de CVSS severo, reduzindo o risco imediato. A fraqueza dominante é stack-based buffer overflow (CWE-121), típica de código C/C++ legado, e apenas 2 CVEs foram publicadas nos últimos 90 dias, indicando ritmo moderado de descobertas. O risco permanece contido pelo baixo volume de exploração ativa, mas a natureza dos buffer overflows exige atenção contínua em ambientes que processam streams de origem não-confiável.
CVE-2026-2921HIGHGStreamer RIFF Palette Integer Overflow Remote Code Execution VulnerabilityEPSS 0.9%CVE-2025-3887HIGHGStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.9%CVE-2024-47778MEDIUMGHSL-2024-258: GStreamer has an OOB-read in gst_wavparse_adtl_chunkEPSS 0.8%CVE-2024-47774MEDIUMGHSL-2024-262: GStreamer has an OOB-read in gst_avi_subtitle_parse_gab2_chunkEPSS 0.8%CVE-2026-3085HIGHGStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-3083HIGHGStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-3082HIGHGStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-2920HIGHGStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-2923HIGHGStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.7%CVE-2026-2922HIGHGStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.4%CVE-2026-3081HIGHGStreamer H.266 Codec Parser Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.4%CVE-2026-3086HIGHGStreamer H.266 Codec Parser Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.4%CVE-2026-3084HIGHGStreamer H.266 Codec Parser Integer Underflow Remote Code Execution VulnerabilityEPSS 0.4%CVE-2026-5056HIGHGStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-40897HIGHStack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a speciEPSS 0.4%CVE-2025-6663HIGHGStreamer H266 Codec Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2026-18298HIGHGStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.2%CVE-2026-18297HIGHGStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.2%CVE-2026-18296HIGHGStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.2%CVE-2026-18295HIGHGStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.2%