Search CVE reports


Toggle filters

11 – 20 of 40 results


CVE-2024-47601

Medium priority
Needs evaluation

GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_matroska_demux_parse_blockgroup_or_simpleblock function within matroska-demux.c....

2 affected packages

gst-plugins-good0.10, gst-plugins-good1.0

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
gst-plugins-good0.10 Not in release Not in release Not in release Needs evaluation
gst-plugins-good1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2024-47599

Medium priority
Needs evaluation

GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_jpeg_dec_negotiate function in gstjpegdec.c. This function does not check for a...

2 affected packages

gst-plugins-good0.10, gst-plugins-good1.0

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
gst-plugins-good0.10 Not in release Not in release Not in release Needs evaluation
gst-plugins-good1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2024-47598

Medium priority
Needs evaluation

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in the qtdemux_merge_sample_table function within qtdemux.c. The problem is that the size of the stts...

2 affected packages

gst-plugins-good0.10, gst-plugins-good1.0

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
gst-plugins-good0.10 Not in release Not in release Not in release Needs evaluation
gst-plugins-good1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2024-47597

Medium priority
Needs evaluation

GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been detected in the function qtdemux_parse_samples within qtdemux.c. This issue arises when the function qtdemux_parse_samples reads...

2 affected packages

gst-plugins-good0.10, gst-plugins-good1.0

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
gst-plugins-good0.10 Not in release Not in release Not in release Needs evaluation
gst-plugins-good1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2024-47596

Medium priority
Needs evaluation

GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in the qtdemux_parse_svq3_stsd_data function within qtdemux.c. In the FOURCC_SMI_ case, seqh_size is read from the input...

2 affected packages

gst-plugins-good0.10, gst-plugins-good1.0

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
gst-plugins-good0.10 Not in release Not in release Not in release Needs evaluation
gst-plugins-good1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2024-47546

Medium priority
Needs evaluation

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in extract_cc_from_data function within qtdemux.c. In the FOURCC_c708 case, the subtraction atom_length - 8 may...

2 affected packages

gst-plugins-good0.10, gst-plugins-good1.0

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
gst-plugins-good0.10 Not in release Not in release Not in release Needs evaluation
gst-plugins-good1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2024-47545

Medium priority
Needs evaluation

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in qtdemux_parse_trak function within qtdemux.c. During the strf parsing case, the subtraction size -= 40 can lead...

2 affected packages

gst-plugins-good0.10, gst-plugins-good1.0

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
gst-plugins-good0.10 Not in release Not in release Not in release Needs evaluation
gst-plugins-good1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2024-47544

Medium priority
Needs evaluation

GStreamer is a library for constructing graphs of media-handling components. The function qtdemux_parse_sbgp in qtdemux.c is affected by a null dereference vulnerability. This vulnerability is fixed in 1.24.10.

2 affected packages

gst-plugins-good0.10, gst-plugins-good1.0

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
gst-plugins-good0.10 Not in release Not in release Not in release Needs evaluation
gst-plugins-good1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2024-47543

Medium priority
Needs evaluation

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in qtdemux_parse_container function within qtdemux.c. In the parent function qtdemux_parse_node, the value...

2 affected packages

gst-plugins-good0.10, gst-plugins-good1.0

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
gst-plugins-good0.10 Not in release Not in release Not in release Needs evaluation
gst-plugins-good1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2024-47540

Medium priority
Needs evaluation

GStreamer is a library for constructing graphs of media-handling components. An uninitialized stack variable vulnerability has been identified in the gst_matroska_demux_add_wvpk_header function within matroska-demux.c. When size <...

2 affected packages

gst-plugins-good0.10, gst-plugins-good1.0

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
gst-plugins-good0.10 Not in release Not in release Not in release Needs evaluation
gst-plugins-good1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages