Lucene search
K

18 matches found

OSV
OSV
added 2026/05/06 2:45 p.m.1 views

BIT-JAVA-2024-47606 GHSL-2024-166: GStreamer Integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemuxparsetheoraextension within qtdemux.c. The vulnerability occurs due to an underflow of the gint size variable, which causes size to hold a large unintended...

9.8CVSS7.4AI score0.01344EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2026/05/06 12:0 a.m.5 views

PT-2026-38023

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemux parse theora extension within qtdemux.c. The vulnerability occurs due to an underflow of the gint size variable, which causes size to hold a large unintended...

9.8CVSS7.5AI score0.01344EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2026/05/06 12:0 a.m.3 views

PT-2026-37816

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemux parse theora extension within qtdemux.c. The vulnerability occurs due to an underflow of the gint size variable, which causes size to hold a large unintended...

9.8CVSS7.5AI score0.01344EPSS
Exploits0References8
Tenable Nessus
Tenable Nessus
added 2025/10/31 12:0 a.m.2 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gstreamer1 (UTSA-2025-988621)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988621 advisory. GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemuxparsetheoraextension withi...

9.8CVSS8.1AI score0.01344EPSS
Exploits0References4
OSV
OSV
added 2025/10/17 2:54 p.m.2 views

OESA-2025-2440 gstreamer1 security update

GStreamer1 implements a framework that allows for processing and encoding of multimedia sources in a manner similar to a shell pipeline. Security Fixes: GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function...

9.8CVSS8.1AI score0.01344EPSS
Exploits0References2
OSV
OSV
added 2025/10/17 2:54 p.m.2 views

OESA-2025-2438 gstreamer1 security update

GStreamer1 implements a framework that allows for processing and encoding of multimedia sources in a manner similar to a shell pipeline. Security Fixes: GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function...

9.8CVSS8.1AI score0.01344EPSS
Exploits0References2
OSV
OSV
added 2025/10/17 2:54 p.m.3 views

OESA-2025-2436 gstreamer1 security update

GStreamer1 implements a framework that allows for processing and encoding of multimedia sources in a manner similar to a shell pipeline. Security Fixes: GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function...

9.8CVSS8.1AI score0.01344EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/09 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2024-47606

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemuxparsetheoraextension...

9.8CVSS8AI score0.01344EPSS
Exploits0References3
Amazon
Amazon
added 2025/02/04 12:0 a.m.2 views

Important: gstreamer1

Issue Overview: GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemuxparsetheoraextension within qtdemux.c. The vulnerability occurs due to an underflow of the gint size variable, which causes size to hold a lar...

9.8CVSS8.1AI score0.01344EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2025/01/29 12:0 a.m.2 views

The vulnerability of the qtdemux_parse_theora_extension function in the Gstreamer multimedia framework allows a hacker to execute arbitrary code.

The vulnerability of the qtdemuxparsetheoraextension function in the Gstreamer multimedia framework is related to integer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.7AI score0.01344EPSS
Exploits0References15Affected Software15
RedHat Linux
RedHat Linux
added 2024/12/18 2:24 a.m.4 views

gstreamer1-plugins-good: integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes

A flaw was found in the MP4/MOV demuxer and memory allocator in the GStreamer library. Processing a specially crafted input file can cause an integer overflow in the qtdemuxparsetheoraextension function. This issue leads to a small amount of memory being allocated to store a large input size,...

9.8CVSS7.3AI score0.01344EPSS
Exploits0References7
RedHat Linux
RedHat Linux
added 2024/12/17 7:13 p.m.3 views

gstreamer1-plugins-good: integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes

A flaw was found in the MP4/MOV demuxer and memory allocator in the GStreamer library. Processing a specially crafted input file can cause an integer overflow in the qtdemuxparsetheoraextension function. This issue leads to a small amount of memory being allocated to store a large input size,...

9.8CVSS7.3AI score0.01344EPSS
Exploits0References7
RedHat Linux
RedHat Linux
added 2024/12/16 4:14 p.m.5 views

gstreamer1-plugins-good: integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes

A flaw was found in the MP4/MOV demuxer and memory allocator in the GStreamer library. Processing a specially crafted input file can cause an integer overflow in the qtdemuxparsetheoraextension function. This issue leads to a small amount of memory being allocated to store a large input size,...

9.8CVSS7.3AI score0.01344EPSS
Exploits0References7
SUSE CVE
SUSE CVE
added 2024/12/13 12:30 a.m.2 views

SUSE CVE-2024-47606

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemuxparsetheoraextension within qtdemux.c. The vulnerability occurs due to an underflow of the gint size variable, which causes size to hold a large unintended...

7.8CVSS8.2AI score0.01344EPSS
Exploits0References20
OSV
OSV
added 2024/12/12 2:3 a.m.1 views

DEBIAN-CVE-2024-47606

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemuxparsetheoraextension within qtdemux.c. The vulnerability occurs due to an underflow of the gint size variable, which causes size to hold a large unintended...

9.8CVSS8.1AI score0.01344EPSS
Exploits0References1
OSV
OSV
added 2024/12/12 2:3 a.m.3 views

AZL-62366 CVE-2024-47606 affecting package gstreamer1 1.20.0-2

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemuxparsetheoraextension within qtdemux.c. The vulnerability occurs due to an underflow of the gint size variable, which causes size to hold a large unintended...

9.8CVSS7.6AI score0.01344EPSS
Exploits0References1
OSV
OSV
added 2024/12/12 12:0 a.m.1 views

UBUNTU-CVE-2024-47606

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemuxparsetheoraextension within qtdemux.c. The vulnerability occurs due to an underflow of the gint size variable, which causes size to hold a large unintended...

9.8CVSS7.5AI score0.01344EPSS
Exploits0References6
CNNVD
CNNVD
added 2024/12/11 12:0 a.m.3 views

GStreamer 输入验证错误漏洞

GStreamer is the GStreamer open source set of frameworks for processing streaming media. An input validation error vulnerability exists in GStreamer that stems from an integer underflow detected in the qtdemuxparsetheoraextension function in qtdemux.c. The vulnerability is caused by the detection...

9.8CVSS7.7AI score0.01344EPSS
Exploits0References7
Rows per page
Query Builder