EUVD-2023-45047

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

GStreamer H265 vulnerability allows remote code execution via stack buffer overflow in parsing files

Reporter	Title	Published	Views	Family All 105
Tenable Nessus	Amazon Linux 2 : gstreamer1-plugins-bad-free (ALAS-2023-2298)	20 Oct 202300:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0134: gstreamer1-plugins-bad-free (ALINUX3-SA-2024:0134)	14 May 202500:00	–	nessus
Tenable Nessus	CentOS 8 : gstreamer1-plugins-bad-free (CESA-2024:3060)	22 May 202400:00	–	nessus
Tenable Nessus	Debian dla-3633 : gir1.2-gst-plugins-bad-1.0 - security update	29 Oct 202300:00	–	nessus
Tenable Nessus	Debian DSA-5533-1 : gst-plugins-bad1.0 - security update	25 Oct 202300:00	–	nessus
Tenable Nessus	GLSA-202406-06 : GStreamer, GStreamer Plugins: Multiple Vulnerabilities	29 Jun 202400:00	–	nessus
Tenable Nessus	MiracleLinux 9 : gstreamer1-plugins-bad-free-1.22.1-4.el9 (AXSA:2024-8037:03)	20 Jan 202600:00	–	nessus
Tenable Nessus	MiracleLinux 8 : gstreamer1-plugins-bad-free-1.16.1-4.el8 (AXSA:2024-8316:04)	20 Jan 202600:00	–	nessus
Tenable Nessus	openSUSE 15 Security Update : gstreamer-plugins-bad (openSUSE-SU-2023:0409-1)	20 Dec 202300:00	–	nessus
Tenable Nessus	Oracle Linux 9 : gstreamer1-plugins-bad-free (ELSA-2024-2287)	6 May 202400:00	–	nessus

[
  {
    "enisaIdVendor": [
      {
        "id": "c4b1db90-6630-3538-857d-c5c37ec7f1d4",
        "vendor": {
          "name": "GStreamer"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "4ba17368-c41c-349c-a70c-c6398e67cab7",
        "product": {
          "name": "GStreamer"
        },
        "product_version": "1.22.4 and 8dddb9ad2009705dfc3e50d59d7c56fc7314cfc3"
      }
    ]
  }
]

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-23-1458/
gstreamer	www.gstreamer.freedesktop.org/security/sa-2023-0008.html

03 Oct 2025 20:07Current

7High risk

Vulners AI Score7

CVSS 38.8

CVSS 3.18.8

EPSS0.06219

SSVC