https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:55:51 +0000 https://cve.radiocsirt.org/vuln/alsa-2024:11122 <p><strong>Affected:</strong> AlmaLinux:9: gstreamer1-plugins-good, AlmaLinux:9: gstreamer1-plugins-good-gtk</p> <p>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.</p> <p>Security Fix(es):</p> <p>* gstreamer1-plugins-good: uninitialized stack memory in Matroska/WebM demuxer (CVE-2024-47540) * gstreamer1-plugins-good: OOB-write in isomp4/qtdemux.c (CVE-2024-47537) * gstreamer1-plugins-good: OOB-write in convert_to_s334_1a (CVE-2024-47539) * gstreamer1-plugins-good: null pointer dereference in gst_gdk_pixbuf_dec_flush (CVE-2024-47613) * gstreamer1-plugins-good: integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes (CVE-2024-47606)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: gstreamer1-plugins-good, AlmaLinux:9: gstreamer1-plugins-good-gtk</p> <p>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.</p> <p>Security Fix(es):</p> <p>* gstreamer1-plugins-good: uninitialized stack memory in Matroska/WebM demuxer (CVE-2024-47540) * gstreamer1-plugins-good: OOB-write in isomp4/qtdemux.c (CVE-2024-47537) * gstreamer1-plugins-good: OOB-write in convert_to_s334_1a (CVE-2024-47539) * gstreamer1-plugins-good: null pointer dereference in gst_gdk_pixbuf_dec_flush (CVE-2024-47613) * gstreamer1-plugins-good: integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes (CVE-2024-47606)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2024:11122 https://cve.radiocsirt.org/vuln/bdu:2024-11292 bdu:2024-11292 https://cve.radiocsirt.org/vuln/bdu:2024-11292 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0661 certfr-2025-avi-0661 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0661 https://cve.radiocsirt.org/vuln/euvd-2026-258163 EUVD-2026-258163 https://cve.radiocsirt.org/vuln/euvd-2026-258163 https://cve.radiocsirt.org/vuln/fkie_cve-2024-47540 <p>GStreamer is a library for constructing graphs of media-handling components. An uninitialized stack variable vulnerability has been identified in the gst_matroska_demux_add_wvpk_header function within matroska-demux.c. When size &lt; 4, the program calls gst_buffer_unmap with an uninitialized map variable. Then, in the gst_memory_unmap function, the program will attempt to unmap the buffer using the uninitialized map variable, causing a function pointer hijack, as it will jump to mem-&gt;allocator-&gt;mem_unmap_full or mem-&gt;allocator-&gt;mem_unmap. This vulnerability could allow an attacker to hijack the execution flow, potentially leading to code execution. This vulnerability is fixed in 1.24.10.</p> <p>GStreamer is a library for constructing graphs of media-handling components. An uninitialized stack variable vulnerability has been identified in the gst_matroska_demux_add_wvpk_header function within matroska-demux.c. When size &lt; 4, the program calls gst_buffer_unmap with an uninitialized map variable. Then, in the gst_memory_unmap function, the program will attempt to unmap the buffer using the uninitialized map variable, causing a function pointer hijack, as it will jump to mem-&gt;allocator-&gt;mem_unmap_full or mem-&gt;allocator-&gt;mem_unmap. This vulnerability could allow an attacker to hijack the execution flow, potentially leading to code execution. This vulnerability is fixed in 1.24.10.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-47540 https://cve.radiocsirt.org/vuln/oesa-2024-2592 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: gstreamer1-plugins-good</p> <p>GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types or processing capabilities can be added simply by installing new plugins. Security Fix(es): (CVE-2024-47537) (CVE-2024-47539) (CVE-2024-47540) (CVE-2024-47543) (CVE-2024-47544) (CVE-2024-47545) (CVE-2024-47546) (CVE-2024-47596) (CVE-2024-47597) (CVE-2024-47599) (CVE-2024-47601) (CVE-2024-47602) (CVE-2024-47603) (CVE-2024-47606) (CVE-2024-47613) (CVE-2024-47774) (CVE-2024-47775) (CVE-2024-47776) (CVE-2024-47777) (CVE-2024-47778) (CVE-2024-47834)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: gstreamer1-plugins-good</p> <p>GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types or processing capabilities can be added simply by installing new plugins. Security Fix(es): (CVE-2024-47537) (CVE-2024-47539) (CVE-2024-47540) (CVE-2024-47543) (CVE-2024-47544) (CVE-2024-47545) (CVE-2024-47546) (CVE-2024-47596) (CVE-2024-47597) (CVE-2024-47599) (CVE-2024-47601) (CVE-2024-47602) (CVE-2024-47603) (CVE-2024-47606) (CVE-2024-47613) (CVE-2024-47774) (CVE-2024-47775) (CVE-2024-47776) (CVE-2024-47777) (CVE-2024-47778) (CVE-2024-47834)</p> https://cve.radiocsirt.org/vuln/oesa-2024-2592 https://cve.radiocsirt.org/vuln/opensuse-su-2025:14699-1 <p>gstreamer-plugins-good-1.24.11-2.1 on GA media</p> <p>gstreamer-plugins-good-1.24.11-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:14699-1 https://cve.radiocsirt.org/vuln/rhsa-2024:11119 <p>gstreamer1-plugins-good: OOB-write in isomp4/qtdemux.c gstreamer1-plugins-good: OOB-write in convert_to_s334_1a gstreamer1-plugins-good: uninitialized stack memory in Matroska/WebM demuxer gstreamer1-plugins-good: integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes gstreamer1-plugins-good: null pointer dereference in gst_gdk_pixbuf_dec_flush</p> <p>gstreamer1-plugins-good: OOB-write in isomp4/qtdemux.c gstreamer1-plugins-good: OOB-write in convert_to_s334_1a gstreamer1-plugins-good: uninitialized stack memory in Matroska/WebM demuxer gstreamer1-plugins-good: integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes gstreamer1-plugins-good: null pointer dereference in gst_gdk_pixbuf_dec_flush</p> https://cve.radiocsirt.org/vuln/rhsa-2024:11119 https://cve.radiocsirt.org/vuln/suse-su-2025:00063-1 <p>Security update for gstreamer-plugins-good</p> <p>Security update for gstreamer-plugins-good</p> https://cve.radiocsirt.org/vuln/suse-su-2025:00063-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-47540 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gst-plugins-good0.10, Ubuntu:Pro:16.04:LTS: gst-plugins-good1.0, Ubuntu:Pro:18.04:LTS: gst-plugins-good1.0, Ubuntu:20.04:LTS: gst-plugins-good1.0, Ubuntu:22.04:LTS: gst-plugins-good1.0, Ubuntu:24.04:LTS: gst-plugins-good1.0</p> <p>GStreamer is a library for constructing graphs of media-handling components. An uninitialized stack variable vulnerability has been identified in the gst_matroska_demux_add_wvpk_header function within matroska-demux.c. When size &lt; 4, the program calls gst_buffer_unmap with an uninitialized map variable. Then, in the gst_memory_unmap function, the program will attempt to unmap the buffer using the uninitialized map variable, causing a function pointer hijack, as it will jump to mem-&gt;allocator-&gt;mem_unmap_full or mem-&gt;allocator-&gt;mem_unmap. This vulnerability could allow an attacker to hijack the execution flow, potentially leading to code execution. This vulnerability is fixed in 1.24.10.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gst-plugins-good0.10, Ubuntu:Pro:16.04:LTS: gst-plugins-good1.0, Ubuntu:Pro:18.04:LTS: gst-plugins-good1.0, Ubuntu:20.04:LTS: gst-plugins-good1.0, Ubuntu:22.04:LTS: gst-plugins-good1.0, Ubuntu:24.04:LTS: gst-plugins-good1.0</p> <p>GStreamer is a library for constructing graphs of media-handling components. An uninitialized stack variable vulnerability has been identified in the gst_matroska_demux_add_wvpk_header function within matroska-demux.c. When size &lt; 4, the program calls gst_buffer_unmap with an uninitialized map variable. Then, in the gst_memory_unmap function, the program will attempt to unmap the buffer using the uninitialized map variable, causing a function pointer hijack, as it will jump to mem-&gt;allocator-&gt;mem_unmap_full or mem-&gt;allocator-&gt;mem_unmap. This vulnerability could allow an attacker to hijack the execution flow, potentially leading to code execution. This vulnerability is fixed in 1.24.10.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-47540 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3586 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GStreamer ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GStreamer ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3586