961 matches found
CVE-2026-46471
An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemuxparseuuid function may read past the end of a heap-allocated buffer, allowing an attacker to disclose heap memory contents...
CVE-2026-46472: Out-of-bounds Read
An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemuxparsechnl function may read past the end of a global array, potentially leading to information disclosure...
Red Hat: CVE-2026-46471: gstreamer1-plugins-good: gstreamer1-plugins-good: information disclosure via out-of-bounds read during MP4 parsing
An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemuxparseuuid function may read past the end of a heap-allocated buffer, allowing an attacker to disclose heap memory contents...
CVE-2026-46471
A vulnerability exists in GStreamer gst-plugins-good before version 1.28.2 . While parsing an MP4 file, the isomp4 plugin's qtdemux_parse_uuid function may perform an out-of-bounds read past the end of a heap-allocated buffer. This occurs when processing custom metadata, potentially allowing an a...
CVE-2026-46471: Buffer Over-read
An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemuxparseuuid function may read past the end of a heap-allocated buffer, allowing an attacker to disclose heap memory contents...
CVE-2026-46472
An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemuxparsechnl function may read past the end of a global array, potentially leading to information disclosure...
Linux Distros Unpatched Vulnerability : CVE-2026-46472
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemuxparsechnl function may read past the...
GStreamer gst-plugins-good security vulnerability
GStreamer gst-plugins-good versions prior to 1.28.2 have a security vulnerability. This vulnerability stems from the qtdemuxparseuuid function in the isomp4 plugin, which may read data beyond the end of the heap allocation buffer when parsing MP4 files. This could lead to a leak of heap memory...
GStreamer gst-plugins-good buffer error vulnerability
GStreamer’s gst-plugins-good version prior to 1.28.2 has a buffer error vulnerability. This vulnerability stems from the qtdemuxparsechnl function in the isomp4 plugin during MP4 file parsing, which may cause out-of-bounds read access to global arrays, potentially leading to information leakage...
Astra Linux – vulnerability in gst-plugins-good1.0
GStreamer FLAC File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability enables remote attackers to execute arbitrary code on affected installations of GStreamer. Exploitation requires interaction with this library; however, the attack vectors may vary depending on th...
Astra Linux – Vulnerability in gst-plugins-good1.0
GStreamer is a library for constructing graphs of media-handling components. A OOB-read vulnerability has been identified in the gstavisubtitleparsegab2chunk function within gstavisubtitle.c. This function reads the namelength value directly from the input file without properly checking it. As a...
Oracle Linux 7 : gstreamer1-plugins-good (ELSA-2026-72367)
The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-72367 advisory. - Backport fix for CVE-2026-18295 Orabug: 40083058 - Backport fix for CVE-2026-18296 Orabug: 40083058 - Backport fix for CVE-2026-18298 Orabug: 400830...
CLEANSTART-2026-KE68922 GStreamer before 1
Security vulnerability affects the gst-plugins-good package. GStreamer before 1...
CLEANSTART-2026-WT42986 Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec
Security vulnerability affects the gst-plugins-good package. Heap-based buffer overflow in the flxdecodedeltafli function in gst/flx/gstflxdec...
CLEANSTART-2026-FY99850 qtdemux_tag_add_str_full function in gst/isomp4/qtdemux
Security vulnerability affects the gst-plugins-good package. The qtdemuxtagaddstrfull function in gst/isomp4/qtdemux...
CLEANSTART-2026-SI50650 gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux
Security vulnerability affects the gst-plugins-good package. The gstavidemuxparsencdt function in gst/avi/gstavidemux...
CLEANSTART-2026-QJ27553 GStreamer before 1
Security vulnerability affects the gst-plugins-good package. GStreamer before 1...
CLEANSTART-2026-TJ00141 qtdemux_parse_samples function in gst/isomp4/qtdemux
Security vulnerability affects the gst-plugins-good package. The qtdemuxparsesamples function in gst/isomp4/qtdemux...
CLEANSTART-2026-UF43430 gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux
Security vulnerability affects the gst-plugins-good package. The gstavidemuxparsencdt function in gst/avi/gstavidemux...