EUVD-2023-45045

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

GStreamer MXF file parsing vulnerability allows remote code execution due to integer overflow flaw.

Reporter	Title	Published	Views	Family All 135
Tenable Nessus	Amazon Linux 2 : gstreamer1-plugins-bad-free (ALAS-2023-2298)	20 Oct 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : gstreamer-plugins-bad-free (ALAS-2025-2972)	19 Aug 202500:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0134: gstreamer1-plugins-bad-free (ALINUX3-SA-2024:0134)	14 May 202500:00	–	nessus
Tenable Nessus	CentOS 8 : gstreamer1-plugins-bad-free (CESA-2024:3060)	22 May 202400:00	–	nessus
Tenable Nessus	Debian dla-3633 : gir1.2-gst-plugins-bad-1.0 - security update	29 Oct 202300:00	–	nessus
Tenable Nessus	Debian DSA-5533-1 : gst-plugins-bad1.0 - security update	25 Oct 202300:00	–	nessus
Tenable Nessus	GLSA-202406-06 : GStreamer, GStreamer Plugins: Multiple Vulnerabilities	29 Jun 202400:00	–	nessus
Tenable Nessus	MiracleLinux 9 : gstreamer1-plugins-bad-free-1.22.1-4.el9 (AXSA:2024-8037:03)	20 Jan 202600:00	–	nessus
Tenable Nessus	MiracleLinux 8 : gstreamer1-plugins-bad-free-1.16.1-4.el8 (AXSA:2024-8316:04)	20 Jan 202600:00	–	nessus
Tenable Nessus	openSUSE 15 Security Update : gstreamer-plugins-bad (openSUSE-SU-2023:0409-1)	20 Dec 202300:00	–	nessus

[
  {
    "enisaIdVendor": [
      {
        "id": "030362fd-7ecf-3a2f-a1bc-09136894c836",
        "vendor": {
          "name": "GStreamer"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "f05af653-264f-3eba-80a1-c337de904ab6",
        "product": {
          "name": "GStreamer"
        },
        "product_version": "1.22.4 and 8dddb9ad2009705dfc3e50d59d7c56fc7314cfc3"
      }
    ]
  }
]

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-23-1456/
gstreamer	www.gstreamer.freedesktop.org/security/sa-2023-0006.html

03 Oct 2025 20:07Current

7.1High risk

Vulners AI Score7.1

CVSS 38.8

CVSS 3.18.8

EPSS0.06171

SSVC