Search CVE reports


Toggle filters

21 – 30 of 50 results


CVE-2024-47597

Medium priority

Some fixes available 4 of 7

GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been detected in the function qtdemux_parse_samples within qtdemux.c. This issue arises when the function qtdemux_parse_samples reads...

2 affected packages

gst-plugins-good0.10, gst-plugins-good1.0

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gst-plugins-good0.10 Not in release Not in release Not in release Not in release
gst-plugins-good1.0 Not affected Fixed Fixed Fixed Needs evaluation
Show less packages

CVE-2024-47596

Medium priority

Some fixes available 4 of 7

GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in the qtdemux_parse_svq3_stsd_data function within qtdemux.c. In the FOURCC_SMI_ case, seqh_size is read from the input...

2 affected packages

gst-plugins-good0.10, gst-plugins-good1.0

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gst-plugins-good0.10 Not in release Not in release Not in release Not in release
gst-plugins-good1.0 Not affected Fixed Fixed Fixed Needs evaluation
Show less packages

CVE-2024-47546

Medium priority

Some fixes available 4 of 7

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in extract_cc_from_data function within qtdemux.c. In the FOURCC_c708 case, the subtraction atom_length - 8 may...

2 affected packages

gst-plugins-good0.10, gst-plugins-good1.0

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gst-plugins-good0.10 Not in release Not in release Not in release Not in release
gst-plugins-good1.0 Not affected Fixed Fixed Fixed Needs evaluation
Show less packages

CVE-2024-47545

Medium priority

Some fixes available 4 of 7

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in qtdemux_parse_trak function within qtdemux.c. During the strf parsing case, the subtraction size -= 40 can lead...

2 affected packages

gst-plugins-good0.10, gst-plugins-good1.0

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gst-plugins-good0.10 Not in release Not in release Not in release Not in release
gst-plugins-good1.0 Not affected Fixed Fixed Fixed Needs evaluation
Show less packages

CVE-2024-47544

Medium priority

Some fixes available 4 of 7

GStreamer is a library for constructing graphs of media-handling components. The function qtdemux_parse_sbgp in qtdemux.c is affected by a null dereference vulnerability. This vulnerability is fixed in 1.24.10.

2 affected packages

gst-plugins-good0.10, gst-plugins-good1.0

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gst-plugins-good0.10 Not in release Not in release Not in release Not in release
gst-plugins-good1.0 Not affected Fixed Fixed Fixed Needs evaluation
Show less packages

CVE-2024-47543

Medium priority

Some fixes available 4 of 7

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in qtdemux_parse_container function within qtdemux.c. In the parent function qtdemux_parse_node, the value...

2 affected packages

gst-plugins-good0.10, gst-plugins-good1.0

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gst-plugins-good0.10 Not in release Not in release Not in release Not in release
gst-plugins-good1.0 Not affected Fixed Fixed Fixed Needs evaluation
Show less packages

CVE-2024-47540

Medium priority

Some fixes available 4 of 7

GStreamer is a library for constructing graphs of media-handling components. An uninitialized stack variable vulnerability has been identified in the gst_matroska_demux_add_wvpk_header function within matroska-demux.c. When size <...

2 affected packages

gst-plugins-good0.10, gst-plugins-good1.0

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gst-plugins-good0.10 Not in release Not in release Not in release Not in release
gst-plugins-good1.0 Not affected Fixed Fixed Fixed Needs evaluation
Show less packages

CVE-2024-47539

Medium priority

Some fixes available 4 of 7

GStreamer is a library for constructing graphs of media-handling components. An out-of-bounds write vulnerability was identified in the convert_to_s334_1a function in isomp4/qtdemux.c. The vulnerability arises due to a discrepancy...

2 affected packages

gst-plugins-good0.10, gst-plugins-good1.0

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gst-plugins-good0.10 Not in release Not in release Not in release Not in release
gst-plugins-good1.0 Not affected Fixed Fixed Fixed Needs evaluation
Show less packages

CVE-2024-47537

Medium priority

Some fixes available 4 of 7

GStreamer is a library for constructing graphs of media-handling components. The program attempts to reallocate the memory pointed to by stream->samples to accommodate stream->n_samples + samples_count elements of type...

2 affected packages

gst-plugins-good0.10, gst-plugins-good1.0

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gst-plugins-good0.10 Not in release Not in release Not in release Not in release
gst-plugins-good1.0 Not affected Fixed Fixed Fixed Needs evaluation
Show less packages

CVE-2023-37327

Medium priority

Some fixes available 8 of 10

GStreamer FLAC File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is...

4 affected packages

gst-plugins-good0.10, gst-plugins-good1.0, gst-plugins-base0.10, gst-plugins-base1.0

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gst-plugins-good0.10 Not in release Not in release Not in release Not in release Ignored
gst-plugins-good1.0 Not affected Not affected Fixed Fixed Needs evaluation
gst-plugins-base0.10 Not in release Not in release Not in release Not in release Ignored
gst-plugins-base1.0 Not affected Not affected Fixed Fixed Fixed
Show less packages