https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:23:13.258869+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:11122 ALSA-2024:11122 — Important: gstreamer1-plugins-good security update 2026-10-03T22:23:13.948066+00:00

Affected: AlmaLinux:9: gstreamer1-plugins-good, AlmaLinux:9: gstreamer1-plugins-good-gtk

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.

Security Fix(es):

* gstreamer1-plugins-good: uninitialized stack memory in Matroska/WebM demuxer (CVE-2024-47540) * gstreamer1-plugins-good: OOB-write in isomp4/qtdemux.c (CVE-2024-47537) * gstreamer1-plugins-good: OOB-write in convert_to_s334_1a (CVE-2024-47539) * gstreamer1-plugins-good: null pointer dereference in gst_gdk_pixbuf_dec_flush (CVE-2024-47613) * gstreamer1-plugins-good: integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes (CVE-2024-47606)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2024-11331 bdu:2024-11331 2026-10-03T22:23:13.948151+00:00 bdu:2024-11331 https://cve.radiocsirt.org/vuln/euvd-2026-258176 EUVD-2026-258176 2026-10-03T22:23:13.948169+00:00 EUVD-2026-258176 https://cve.radiocsirt.org/vuln/fkie_cve-2024-47613 fkie_cve-2024-47613 2026-10-03T22:23:13.948181+00:00

GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been identified in `gst_gdk_pixbuf_dec_flush` within `gstgdkpixbufdec.c`. This function invokes `memcpy`, using `out_pix` as the destination address. `out_pix` is expected to point to the frame 0 from the frame structure, which is read from the input file. However, in certain situations, it can points to a NULL frame, causing the subsequent call to `memcpy` to attempt writing to the null address (0x00), leading to a null pointer dereference. This vulnerability can result in a Denial of Service (DoS) by triggering a segmentation fault (SEGV). This vulnerability is fixed in 1.24.10.

 https://cve.radiocsirt.org/vuln/oesa-2024-2592 OESA-2024-2592 — gstreamer1-plugins-good security update 2026-10-03T22:23:13.948206+00:00

Affected: openEuler:22.03-LTS-SP4: gstreamer1-plugins-good

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types or processing capabilities can be added simply by installing new plugins. Security Fix(es): (CVE-2024-47537) (CVE-2024-47539) (CVE-2024-47540) (CVE-2024-47543) (CVE-2024-47544) (CVE-2024-47545) (CVE-2024-47546) (CVE-2024-47596) (CVE-2024-47597) (CVE-2024-47599) (CVE-2024-47601) (CVE-2024-47602) (CVE-2024-47603) (CVE-2024-47606) (CVE-2024-47613) (CVE-2024-47774) (CVE-2024-47775) (CVE-2024-47776) (CVE-2024-47777) (CVE-2024-47778) (CVE-2024-47834)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14578-1 openSUSE-SU-2024:14578-1 — gstreamer-plugins-good-1.24.10-2.1 on GA media 2026-10-03T22:23:13.948231+00:00

gstreamer-plugins-good-1.24.10-2.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2024:11119 RHSA-2024:11119 — Red Hat Security Advisory: gstreamer1-plugins-good security update 2026-10-03T22:23:13.948254+00:00

gstreamer1-plugins-good: OOB-write in isomp4/qtdemux.c gstreamer1-plugins-good: OOB-write in convert_to_s334_1a gstreamer1-plugins-good: uninitialized stack memory in Matroska/WebM demuxer gstreamer1-plugins-good: integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes gstreamer1-plugins-good: null pointer dereference in gst_gdk_pixbuf_dec_flush

 https://cve.radiocsirt.org/vuln/suse-su-2025:00063-1 SUSE-SU-2025:00063-1 — Security update for gstreamer-plugins-good 2026-10-03T22:23:13.948276+00:00

Security update for gstreamer-plugins-good

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-47613 UBUNTU-CVE-2024-47613 2026-10-03T22:23:13.948307+00:00

Affected: Ubuntu:16.04:LTS: gst-plugins-good0.10, Ubuntu:Pro:16.04:LTS: gst-plugins-good1.0, Ubuntu:Pro:18.04:LTS: gst-plugins-good1.0, Ubuntu:20.04:LTS: gst-plugins-good1.0, Ubuntu:22.04:LTS: gst-plugins-good1.0, Ubuntu:24.04:LTS: gst-plugins-good1.0

GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been identified in `gst_gdk_pixbuf_dec_flush` within `gstgdkpixbufdec.c`. This function invokes `memcpy`, using `out_pix` as the destination address. `out_pix` is expected to point to the frame 0 from the frame structure, which is read from the input file. However, in certain situations, it can points to a NULL frame, causing the subsequent call to `memcpy` to attempt writing to the null address (0x00), leading to a null pointer dereference. This vulnerability can result in a Denial of Service (DoS) by triggering a segmentation fault (SEGV). This vulnerability is fixed in 1.24.10.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3586 WID-SEC-W-2024-3586 — GStreamer: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-03T22:23:13.948338+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GStreamer ausnutzen, um einen Denial of Service Angriff durchzuführen.