EUVD-2023-45046

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

GStreamer MXF file parsing flaw allows remote code execution via integer overflow in affected installations.

Reporter	Title	Published	Views	Family All 108
Tenable Nessus	Amazon Linux 2 : gstreamer1-plugins-bad-free (ALAS-2023-2298)	20 Oct 202300:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0134: gstreamer1-plugins-bad-free (ALINUX3-SA-2024:0134)	14 May 202500:00	–	nessus
Tenable Nessus	CentOS 8 : gstreamer1-plugins-bad-free (CESA-2024:3060)	22 May 202400:00	–	nessus
Tenable Nessus	Debian dla-3633 : gir1.2-gst-plugins-bad-1.0 - security update	29 Oct 202300:00	–	nessus
Tenable Nessus	Debian DSA-5533-1 : gst-plugins-bad1.0 - security update	25 Oct 202300:00	–	nessus
Tenable Nessus	GLSA-202406-06 : GStreamer, GStreamer Plugins: Multiple Vulnerabilities	29 Jun 202400:00	–	nessus
Tenable Nessus	MiracleLinux 9 : gstreamer1-plugins-bad-free-1.22.1-4.el9 (AXSA:2024-8037:03)	20 Jan 202600:00	–	nessus
Tenable Nessus	MiracleLinux 8 : gstreamer1-plugins-bad-free-1.16.1-4.el8 (AXSA:2024-8316:04)	20 Jan 202600:00	–	nessus
Tenable Nessus	openSUSE 15 Security Update : gstreamer-plugins-bad (openSUSE-SU-2024:0305-1)	18 Sep 202400:00	–	nessus
Tenable Nessus	Oracle Linux 9 : gstreamer1-plugins-bad-free (ELSA-2024-2287)	6 May 202400:00	–	nessus

[
  {
    "enisaIdVendor": [
      {
        "id": "4f90ee1a-aa7e-39db-839a-402e9b69cc97",
        "vendor": {
          "name": "GStreamer"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "898f4e09-abb8-3569-8ed8-24cf130e2978",
        "product": {
          "name": "GStreamer"
        },
        "product_version": "1.22.4 and 8dddb9ad2009705dfc3e50d59d7c56fc7314cfc3"
      }
    ]
  }
]

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-23-1457/
gstreamer	www.gstreamer.freedesktop.org/security/sa-2023-0007.html

03 Oct 2025 20:07Current

7High risk

Vulners AI Score7

CVSS 38.8

CVSS 3.18.8

EPSS0.0428

SSVC