11613 matches found
CVE-2026-86476
A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attached GstVideoMeta metadata declares plane strides and offsets that exceed the actual backing memory allocation. The metadata is not range-checked during deserialization, and the...
CVE-2026-100229
An out-of-bounds write vulnerability exists in the GStreamer H.266 codec parser library (libgstcodecparsers ). The flaw is located in the gst_h266_parser_parse_dci() function, where an off-by-one array bound check allows a reserved field value to be incorrectly accepted. This causes the parser to...
CVE-2026-100231
The GStreamer multimedia framework contains a heap out-of-bounds write vulnerability in the asfmux plugin. The root cause is an incorrect buffer size calculation when processing string metadata tags containing Unicode characters outside the Basic Multilingual Plane (such as emojis); the plugin in...
CVE-2026-100231 Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: heap out-of-bounds write in asfmux due to incorrect utf-16 size calculation for non-bmp characters
A flaw was found in the GStreamer multimedia framework's ASF muxer plugin asfmux. When writing string metadata tags containing Unicode characters outside the Basic Multilingual Plane such as emoji to an ASF container, the plugin incorrectly calculates the buffer size needed for the UTF-16LE...
CVE-2026-86476 Gstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated gstvideometa plane extents in gst_video_frame_map_id and video_meta_deserialize
A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attached GstVideoMeta metadata declares plane strides and offsets that exceed the actual backing memory allocation. The metadata is not range-checked during deserialization, and the...
EUVD-2026-100950
A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attached GstVideoMeta metadata declares plane strides and offsets that exceed the actual backing memory allocation. The metadata is not range-checked during deserialization, and the...
CVE-2026-86476
A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attached GstVideoMeta metadata declares plane strides and offsets that exceed the actual backing memory allocation. The metadata is not range-checked during deserialization, and the...
CVE-2026-86476
A heap buffer overflow exists in gst-plugins-base within the libgstvideo component. The vulnerability is caused by a failure to range-check GstVideoMeta metadata during deserialization, allowing plane strides and offsets to exceed the actual backing memory allocation. A local attacker controlling...
CVE-2026-86476
A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attached GstVideoMeta metadata declares plane strides and offsets that exceed the actual backing memory allocation. The metadata is not range-checked during deserialization, and the...
CLEANSTART-2026-LE60238 gst_aac_parse_sink_setcaps function in gst/audioparsers/gstaacparse
Security vulnerability affects the gst-plugins-good package. The gstaacparsesinksetcaps function in gst/audioparsers/gstaacparse...
CLEANSTART-2026-TJ00141 qtdemux_parse_samples function in gst/isomp4/qtdemux
Security vulnerability affects the gst-plugins-good package. The qtdemuxparsesamples function in gst/isomp4/qtdemux...
CLEANSTART-2026-PZ30924 Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec
Security vulnerability affects the gst-plugins-good package. Heap-based buffer overflow in the flxdecodedeltafli function in gst/flx/gstflxdec...
CLEANSTART-2026-WT42986 Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec
Security vulnerability affects the gst-plugins-good package. Heap-based buffer overflow in the flxdecodedeltafli function in gst/flx/gstflxdec...
CLEANSTART-2026-KE68922 GStreamer before 1
Security vulnerability affects the gst-plugins-good package. GStreamer before 1...
CLEANSTART-2026-IY76311 FLIC decoder in GStreamer before 1
Security vulnerability affects the gst-plugins-good package. The FLIC decoder in GStreamer before 1...
CLEANSTART-2026-LU26408 Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec
Security vulnerability affects the gst-plugins-good package. Heap-based buffer overflow in the flxdecodedeltafli function in gst/flx/gstflxdec...
CLEANSTART-2026-UF43430 gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux
Security vulnerability affects the gst-plugins-good package. The gstavidemuxparsencdt function in gst/avi/gstavidemux...
CLEANSTART-2026-SI50650 gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux
Security vulnerability affects the gst-plugins-good package. The gstavidemuxparsencdt function in gst/avi/gstavidemux...
CLEANSTART-2026-FY99850 qtdemux_tag_add_str_full function in gst/isomp4/qtdemux
Security vulnerability affects the gst-plugins-good package. The qtdemuxtagaddstrfull function in gst/isomp4/qtdemux...