Lucene search
+L

4828 matches found

RedHat Linux
RedHat Linux
added yesterday3 views

gstreamer: gstreamer: DTLS certificate Subject DN stack buffer overflow in openssl_verify_callback

A stack buffer overflow vulnerability was found in GStreamer's DTLS plugin. During a DTLS handshake, the peer certificate Subject Distinguished Name is printed into a fixed-size 2048-byte stack buffer without bounds checking. A remote unauthenticated attacker can send a certificate with an...

7.5CVSS7.5AI score0.00577EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added yesterday3 views

gstreamer: gstreamer: rfbsrc/librfb Hextile heap out-of-bounds write with 16bpp framebuffer

A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the Hextile background fill path writes 32-bit pixel values into a buffer allocated for 16-bit...

7.1CVSS7.6AI score0.00326EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2 days ago4 views

gstreamer: gstreamer: DTLS certificate Subject DN stack buffer overflow in openssl_verify_callback

A stack buffer overflow vulnerability was found in GStreamer's DTLS plugin. During a DTLS handshake, the peer certificate Subject Distinguished Name is printed into a fixed-size 2048-byte stack buffer without bounds checking. A remote unauthenticated attacker can send a certificate with an...

7.5CVSS5.7AI score0.00577EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2 days ago3 views

gstreamer: gstreamer: rfbsrc/librfb Hextile heap out-of-bounds write with 16bpp framebuffer

A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the Hextile background fill path writes 32-bit pixel values into a buffer allocated for 16-bit...

7.1CVSS5.7AI score0.00326EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2 days ago5 views

gstreamer: gstreamer: DTLS certificate Subject DN stack buffer overflow in openssl_verify_callback

A stack buffer overflow vulnerability was found in GStreamer's DTLS plugin. During a DTLS handshake, the peer certificate Subject Distinguished Name is printed into a fixed-size 2048-byte stack buffer without bounds checking. A remote unauthenticated attacker can send a certificate with an...

7.5CVSS5.7AI score0.00577EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2 days ago4 views

gstreamer: gstreamer: rfbsrc/librfb Hextile heap out-of-bounds write with 16bpp framebuffer

A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the Hextile background fill path writes 32-bit pixel values into a buffer allocated for 16-bit...

7.1CVSS5.7AI score0.00326EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2 days ago5 views

Important: Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

7.5CVSS5.8AI score0.00577EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2 days ago4 views

gstreamer: gstreamer: DTLS certificate Subject DN stack buffer overflow in openssl_verify_callback

A stack buffer overflow vulnerability was found in GStreamer's DTLS plugin. During a DTLS handshake, the peer certificate Subject Distinguished Name is printed into a fixed-size 2048-byte stack buffer without bounds checking. A remote unauthenticated attacker can send a certificate with an...

7.5CVSS5.7AI score0.00577EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2 days ago4 views

Important: Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

7.5CVSS5.8AI score0.00577EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2 days ago7 views

gstreamer: gstreamer: rfbsrc/librfb Hextile heap out-of-bounds write with 16bpp framebuffer

A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the Hextile background fill path writes 32-bit pixel values into a buffer allocated for 16-bit...

7.1CVSS5.7AI score0.00326EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2 days ago4 views

gstreamer: gstreamer: DTLS certificate Subject DN stack buffer overflow in openssl_verify_callback

A stack buffer overflow vulnerability was found in GStreamer's DTLS plugin. During a DTLS handshake, the peer certificate Subject Distinguished Name is printed into a fixed-size 2048-byte stack buffer without bounds checking. A remote unauthenticated attacker can send a certificate with an...

7.5CVSS5.7AI score0.00577EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2 days ago4 views

gstreamer: gstreamer: rfbsrc/librfb Hextile heap out-of-bounds write with 16bpp framebuffer

A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the Hextile background fill path writes 32-bit pixel values into a buffer allocated for 16-bit...

7.1CVSS5.7AI score0.00326EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2 days ago2 views

gstreamer: gstreamer: rfbsrc/librfb Hextile heap out-of-bounds write with 16bpp framebuffer

A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the Hextile background fill path writes 32-bit pixel values into a buffer allocated for 16-bit...

7.1CVSS5.7AI score0.00326EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2 days ago2 views

gstreamer: gstreamer: DTLS certificate Subject DN stack buffer overflow in openssl_verify_callback

A stack buffer overflow vulnerability was found in GStreamer's DTLS plugin. During a DTLS handshake, the peer certificate Subject Distinguished Name is printed into a fixed-size 2048-byte stack buffer without bounds checking. A remote unauthenticated attacker can send a certificate with an...

7.5CVSS5.6AI score0.00577EPSS
SaveExploits0References6
NVD
NVD
added 3 days ago9 views

CVE-2026-73434

A flaw was found in GStreamer gst-plugins-good avidemux. In gstavidemuxriffparsevprp, the number of available gstriffvprpvideofielddesc entries is calculated by dividing the remaining buffer size by the attacker-controlled vprp-fields value, rather than by sizeofgstriffvprpvideofielddesc. This ca...

6.1CVSS0.00127EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 3 days ago5 views

CVE-2026-73433

A flaw was found in GStreamer gst-plugins-good avidemux. When parsing FUJIFILM metadata in an AVI strd chunk, gstavidemuxparsestrd decrements a remaining-length counter by fixed offsets 98 and 10 bytes without verifying sufficient data remains. For crafted strd payloads of exactly 106 or 107 byte...

6.6CVSS5.4AI score0.00127EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 3 days ago5 views

CVE-2026-73434

A flaw was found in GStreamer gst-plugins-good avidemux. In gstavidemuxriffparsevprp, the number of available gstriffvprpvideofielddesc entries is calculated by dividing the remaining buffer size by the attacker-controlled vprp-fields value, rather than by sizeofgstriffvprpvideofielddesc. This ca...

6.1CVSS5.5AI score0.00127EPSS
SaveExploits0References5
CVE
CVE
added 3 days ago23 views

CVE-2026-73434

Summary: CVE-2026-73434 affects the GStreamer gst-plugins-good package (avidemux). The flaw occurs in gst_avi_demux_riff_parse_vprp(): it computes the number of available gst_riff_vprp_video_field_desc entries by dividing the remaining buffer size by the attacker-controlled vprp->fields, inste...

6.1CVSS5.5AI score0.00127EPSS
SaveExploits0References4
Cvelist
Cvelist
added 3 days ago27 views

CVE-2026-73434 Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing

A flaw was found in GStreamer gst-plugins-good avidemux. In gstavidemuxriffparsevprp, the number of available gstriffvprpvideofielddesc entries is calculated by dividing the remaining buffer size by the attacker-controlled vprp-fields value, rather than by sizeofgstriffvprpvideofielddesc. This ca...

6.1CVSS0.00127EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 3 days ago4 views

Linux Distros Unpatched Vulnerability : CVE-2026-73434

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GStreamer gst-plugins-good avidemux. In gstavidemuxriffparsevprp, the number of available gstriffvprpvideofielddesc entries is calculated by...

6.1CVSS5.7AI score0.00127EPSS
SaveExploits0References4
Rows per page
Query Builder