Approved changes feed: RSS · Atom

cpe:2.3:a:gstreamer:gstreamer:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGstreamer (63e5ec10-e996-5236-9f9b-f9daeb3b5a77)
ProductGstreamer (ee59c46f-9f26-5ac4-848b-29c5e6723fd4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:bitbucket/cleveron/gstreamer purl2cpe 2026-06-01 10:17:37.060612
pkg:deb/debian/gstreamer1 purl2cpe 2026-06-01 10:17:37.060614
pkg:deb/ubuntu/gstreamer1 purl2cpe 2026-06-01 10:17:37.060615
pkg:github/gstreamer/gstreamer purl2cpe 2026-06-01 10:17:37.060617
pkg:gitlab/redhat/gstreamer1 purl2cpe 2026-06-01 10:17:37.060619
pkg:rpm/centos/gstreamer1 purl2cpe 2026-06-01 10:17:37.060620
pkg:rpm/fedora/gstreamer1 purl2cpe 2026-06-01 10:17:37.060622
pkg:rpm/opensuse/gstreamer1 purl2cpe 2026-06-01 10:17:37.060623

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-3086 vulnerable 2026-06-08 08:01:17.701045 GStreamer H.266 Codec Parser Out-Of-Bounds Write Remote Code Execution Vulnerability
HIGH (7.8)
GStreamer H.266 Codec Parser Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the processing of APS units. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28911.
Published: 2026-03-13T20:40:12.973Z
Updated: 2026-07-15T01:09:44.630Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3085 vulnerable 2026-06-08 08:01:17.700755 GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability
HIGH (8.8)
GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the processing of X-QDM RTP payloads. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28851.
Published: 2026-03-13T20:40:02.186Z
Updated: 2026-07-21T12:05:03.584Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3084 vulnerable 2026-06-08 08:01:17.700364 GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability
HIGH (7.8)
GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of picture partitions. The issue results from the lack of proper validation of user-supplied data, which can result in an integer underflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28910.
Published: 2026-03-13T20:42:03.443Z
Updated: 2026-07-15T01:09:49.917Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3083 vulnerable 2026-06-08 08:01:17.700061 GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability
HIGH (8.8)
GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the processing of X-QDM RTP payload elements. When parsing the packetid element, the process does not properly validate user-supplied data, which can result in a write past the end of an allocated array. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28850.
Published: 2026-03-13T20:41:31.185Z
Updated: 2026-07-21T12:05:03.041Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3082 vulnerable 2026-06-08 08:01:17.699592 GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability
HIGH (7.8)
GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the processing of Huffman tables. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28840.
Published: 2026-03-13T20:39:33.772Z
Updated: 2026-07-21T12:05:09.274Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3081 vulnerable 2026-06-08 08:01:17.699019 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-2923 vulnerable 2026-06-08 07:55:17.836493 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-2922 vulnerable 2026-06-08 07:55:17.836167 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-2921 vulnerable 2026-06-08 07:55:17.835790 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-2920 vulnerable 2026-06-08 07:55:17.835323 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1940 vulnerable 2026-06-08 07:49:09.876379 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6663 vulnerable 2026-06-08 07:43:15.791222 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47808 vulnerable 2026-06-08 07:27:14.885609 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47807 vulnerable 2026-06-08 07:27:14.885291 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47806 vulnerable 2026-06-08 07:27:14.884938 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47219 vulnerable 2026-06-08 07:27:09.854302 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47183 vulnerable 2026-06-08 07:27:09.697304 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3887 vulnerable 2026-06-08 07:23:10.088435 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2759 vulnerable 2026-06-08 07:16:58.189111 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4453 vulnerable 2026-06-08 06:50:17.787855 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47835 vulnerable 2026-06-08 06:48:13.334610 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47834 vulnerable 2026-06-08 06:48:13.334044 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47778 vulnerable 2026-06-08 06:48:13.148696 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47777 vulnerable 2026-06-08 06:48:13.148200 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47776 vulnerable 2026-06-08 06:48:13.147677 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47775 vulnerable 2026-06-08 06:48:13.147293 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47774 vulnerable 2026-06-08 06:48:13.146901 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47615 vulnerable 2026-06-08 06:48:12.941955 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47613 vulnerable 2026-06-08 06:48:12.938802 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47607 vulnerable 2026-06-08 06:48:12.930289 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47606 vulnerable 2026-06-08 06:48:12.929840 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47603 vulnerable 2026-06-08 06:48:12.924704 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47602 vulnerable 2026-06-08 06:48:12.924324 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47601 vulnerable 2026-06-08 06:48:12.923807 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47600 vulnerable 2026-06-08 06:48:12.923426 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47599 vulnerable 2026-06-08 06:48:12.923038 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47598 vulnerable 2026-06-08 06:48:12.922486 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47597 vulnerable 2026-06-08 06:48:12.922062 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47596 vulnerable 2026-06-08 06:48:12.921516 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47546 vulnerable 2026-06-08 06:48:12.549086 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47545 vulnerable 2026-06-08 06:48:12.548723 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47544 vulnerable 2026-06-08 06:48:12.548337 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47543 vulnerable 2026-06-08 06:48:12.547809 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47542 vulnerable 2026-06-08 06:48:12.547407 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47541 vulnerable 2026-06-08 06:48:12.546989 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47540 vulnerable 2026-06-08 06:48:12.546494 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47539 vulnerable 2026-06-08 06:48:12.545984 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47538 vulnerable 2026-06-08 06:48:12.545556 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47537 vulnerable 2026-06-08 06:48:12.544019 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0444 vulnerable 2026-06-08 06:22:01.080594 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50186 vulnerable 2026-06-08 06:16:15.641015 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44446 vulnerable 2026-06-08 06:12:41.041722 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44429 vulnerable 2026-06-08 06:12:41.002411 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40476 vulnerable 2026-06-08 06:11:03.308067 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40475 vulnerable 2026-06-08 06:11:03.307509 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40474 vulnerable 2026-06-08 06:11:03.303226 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38104 vulnerable 2026-06-08 06:08:16.885802 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38103 vulnerable 2026-06-08 06:08:16.884333 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37329 vulnerable 2026-06-08 06:08:15.147103 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37328 vulnerable 2026-06-08 06:08:15.146540 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37327 vulnerable 2026-06-08 06:08:15.145220 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2122 vulnerable 2026-06-08 05:42:50.312813 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1925 vulnerable 2026-06-08 05:39:14.232068 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1924 vulnerable 2026-06-08 05:39:14.231497 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1923 vulnerable 2026-06-08 05:39:14.230840 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1922 vulnerable 2026-06-08 05:39:14.230288 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1921 vulnerable 2026-06-08 05:39:14.229793 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1920 vulnerable 2026-06-08 05:39:14.228976 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3522 vulnerable 2026-06-08 05:33:52.707745 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3498 vulnerable 2026-06-08 05:33:52.489886 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3497 vulnerable 2026-06-08 05:33:52.489303 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9928 vulnerable 2026-06-08 05:14:26.453904 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5848 vulnerable 2026-06-08 05:09:49.917532 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5847 vulnerable 2026-06-08 05:09:49.908976 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5846 vulnerable 2026-06-08 05:09:49.908483 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5845 vulnerable 2026-06-08 05:09:49.908064 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5844 vulnerable 2026-06-08 05:09:49.907639 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5843 vulnerable 2026-06-08 05:09:49.907209 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5842 vulnerable 2026-06-08 05:09:49.906777 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5841 vulnerable 2026-06-08 05:09:49.906358 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5840 vulnerable 2026-06-08 05:09:49.905932 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5839 vulnerable 2026-06-08 05:09:49.905484 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5838 vulnerable 2026-06-08 05:09:49.905033 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5837 vulnerable 2026-06-08 05:09:49.904473 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9813 vulnerable 2026-06-08 05:08:24.523083 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9812 vulnerable 2026-06-08 05:08:24.522677 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9811 vulnerable 2026-06-08 05:08:24.521997 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9810 vulnerable 2026-06-08 05:08:24.521465 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9809 vulnerable 2026-06-08 05:08:24.520873 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9808 vulnerable 2026-06-08 05:08:24.520443 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9807 vulnerable 2026-06-08 05:08:24.520023 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9636 vulnerable 2026-06-08 05:08:24.148562 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9635 vulnerable 2026-06-08 05:08:24.147967 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9634 vulnerable 2026-06-08 05:08:24.143682 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9446 vulnerable 2026-06-08 05:08:23.804965 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-10199 vulnerable 2026-06-08 05:07:17.570482 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-10198 vulnerable 2026-06-08 05:07:17.569805 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0797 vulnerable 2026-06-08 05:06:22.937595 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0586 vulnerable 2026-06-08 04:51:10.177684 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.