GStreamer

Products

ProductCVEsExploitedLatest
GStreamer62–Oct 21, 2026
Good Plug-ins2–May 14, 2026
gst-plugins-good2–Aug 12, 2026
ORC1–Jul 26, 2024

Exploited and recent CVEs

  • CVE-2026-111183 Critical 9.8 GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability 0.7%
  • CVE-2026-18299 High 7.8 GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability 0.2%
  • CVE-2026-18298 High 7.8 GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability 0.2%
  • CVE-2026-18297 High 7.8 GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability 0.2%
  • CVE-2026-18296 High 7.8 GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability 0.2%
  • CVE-2026-18295 High 7.8 GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability 0.2%
  • CVE-2026-73433 Medium 6.6 Gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux fujifilm strd parsing leading to out-of-bounds read/write 0.1%
  • CVE-2026-73434 Medium 6.1 Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing 0.1%
  • CVE-2026-5056 High 7.8 GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability 0.3%
  • CVE-2026-46470 Medium 4.0 An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_audio_caps function does not sufficiently validate atom data before perf 0.2%
  • CVE-2026-46469 Medium 4.0 An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_parse_trak function does not sufficiently validate atom data before perf 0.1%
  • CVE-2026-3084 High 7.8 GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability 0.4%
  • CVE-2026-2921 High 7.8 GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability 0.9%
  • CVE-2026-3083 High 8.8 GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability 0.8%
  • CVE-2026-3086 High 7.8 GStreamer H.266 Codec Parser Out-Of-Bounds Write Remote Code Execution Vulnerability 0.4%
  • CVE-2026-3085 High 8.8 GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability 1.3%
  • CVE-2026-3082 High 7.8 GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability 0.8%
  • CVE-2026-3081 High 7.8 GStreamer H.266 Codec Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability 0.5%
  • CVE-2026-2923 High 7.8 GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability 0.8%
  • CVE-2026-2922 High 7.8 GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution Vulnerability 0.4%
  • CVE-2026-2920 High 7.8 GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability 0.8%
  • CVE-2025-6663 High 7.8 GStreamer H266 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability 0.4%
  • CVE-2025-2759 High 7.0 GStreamer Incorrect Permission Assignment Local Privilege Escalation Vulnerability 0.1%
  • CVE-2025-3887 High 8.8 GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability 0.9%
  • CVE-2024-47834 Medium 5.1 GHSL-2024-280: Gstreamer Use-After-Free read in Matroska CodecPrivate 0.9%
  • CVE-2024-47835 Medium 6.8 GHSL-2024-263: Gstreamer NULL-pointer dereference in LRC subtitle parser 1.0%
  • CVE-2024-47778 Medium 5.1 GHSL-2024-258: GStreamer has an OOB-read in gst_wavparse_adtl_chunk 0.8%
  • CVE-2024-47777 Medium 5.1 GHSL-2024-259: GStreamer has an OOB-read in gst_wavparse_smpl_chunk 1.2%
  • CVE-2024-47776 Medium 5.1 GHSL-2024-260: GStreamer has a OOB-read in gst_wavparse_cue_chunk 1.2%
  • CVE-2024-47775 Medium 5.1 GHSL-2024-261: GStreamer has an OOB-read in parse_ds64 1.2%