EUVD-2023-41232

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

GStreamer PGS file parsing vulnerability allows remote code execution via heap-based buffer overflow.

Reporter	Title	Published	Views	Family All 115
Tenable Nessus	Amazon Linux 2 : gstreamer1-plugins-base (ALAS-2023-2120)	20 Jul 202300:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0103: gstreamer1-plugins-base (ALINUX3-SA-2024:0103)	14 May 202500:00	–	nessus
Tenable Nessus	CentOS 8 : gstreamer1-plugins-base (CESA-2024:3088)	22 May 202400:00	–	nessus
Tenable Nessus	Debian dla-3504 : gir1.2-gst-plugins-base-1.0 - security update	26 Jul 202300:00	–	nessus
Tenable Nessus	Debian DSA-5443-1 : gst-plugins-base1.0 - security update	2 Jul 202300:00	–	nessus
Tenable Nessus	Fedora 38 : mingw-gstreamer1 / mingw-gstreamer1-plugins-bad-free / etc (2023-0984b63b23)	24 Dec 202300:00	–	nessus
Tenable Nessus	MiracleLinux 9 : gstreamer1-plugins-base-1.22.1-2.el9 (AXSA:2024-8035:01)	20 Jan 202600:00	–	nessus
Tenable Nessus	MiracleLinux 8 : gstreamer1-plugins-base-1.16.1-3.el8 (AXSA:2024-8315:02)	20 Jan 202600:00	–	nessus
Tenable Nessus	Oracle Linux 9 : gstreamer1-plugins-base (ELSA-2024-2302)	6 May 202400:00	–	nessus
Tenable Nessus	Oracle Linux 8 : gstreamer1-plugins-base (ELSA-2024-3088)	28 May 202400:00	–	nessus

[
  {
    "enisaIdVendor": [
      {
        "id": "07996bb3-7207-3230-8d33-518fa418aa53",
        "vendor": {
          "name": "GStreamer"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "93b5271a-a601-318a-9119-12e5aadcb7ac",
        "product": {
          "name": "GStreamer"
        },
        "product_version": "1.22 and latest commit 6dff93acf69c40271a769aa2fa35efbcc2aeb9b4"
      }
    ]
  }
]

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-23-901/
gstreamer	www.gstreamer.freedesktop.org/security/sa-2023-0003.html

03 Oct 2025 20:07Current

7High risk

Vulners AI Score7

CVSS 38.8

CVSS 3.18.8

EPSS0.07706

SSVC