CVE catalog

CVE-2024-47606

GStreamer Good Plugins vulnerabilities

Severity: High · CVSS 8.8CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Published: Dec 3, 2024, 11:00:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 1.73% · Oct 25, 2026

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemux_parse_theora_extension within qtdemux.c. The vulnerability occurs due to an underflow of the gint size variable, which causes size to hold a large unintended value when cast to an unsigned integer. This 32-bit negative value is then cast to a 64-bit unsigned integer (0xfffffffffffffffa) in a subsequent call to gst_buffer_new_and_alloc. The function gst_buffer_new_allocate then attempts to allocate memory, eventually calling _sysmem_new_block. The function _sysmem_new_block adds alignment and header size to the (unsigned) size, causing the overflow of the 'slice_size' variable. As a result, only 0x89 bytes are allocated, despite the large input size. When the following memcpy call occurs in gst_buffer_fill, the data from the input file will overwrite the content of the GstMapInfo info structure. Finally, during the call to gst_memory_unmap, the overwritten memory may cause a function pointer hijack, as the mem->allocator->mem_unmap_full function is called with a corrupted pointer. This function pointer overwrite could allow an attacker to alter the execution flow of the program, leading to arbitrary code execution. This vulnerability is fixed in 1.24.10.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	gstreamer1.0	sid	`1.28.8-1`	fixed
Debian	gstreamer1.0	forky	`1.28.8-1`	fixed
Debian	gstreamer1.0	trixie	`1.26.2-2`	fixed
Debian	gstreamer1.0	bookworm	`1.22.0-2+deb12u1`	fixed
Debian	gstreamer1.0	bookworm-security	`1.22.0-2+deb12u1`	fixed
Debian	gst-plugins-good1.0	sid	`1.28.8-1`	fixed
Debian	gst-plugins-good1.0	forky	`1.28.8-1`	fixed
Debian	gst-plugins-good1.0	trixie	`1.26.2-1+deb13u2`	fixed
Debian	gst-plugins-good1.0	trixie-security	`1.26.2-1+deb13u2`	fixed
Debian	gst-plugins-good1.0	bookworm	`1.22.0-5+deb12u3`	fixed
Debian	gst-plugins-good1.0	bookworm-security	`1.22.0-5+deb12u4`	fixed
Ubuntu	gst-plugins-good1.0	noble	`1.24.2-1ubuntu1.1`	fixed
Ubuntu	gstreamer1.0-gtk3	noble	`1.24.2-1ubuntu1.1`	fixed
Ubuntu	gstreamer1.0-plugins-good	noble	`1.24.2-1ubuntu1.1`	fixed
Ubuntu	gstreamer1.0-pulseaudio	noble	`1.24.2-1ubuntu1.1`	fixed
Ubuntu	gstreamer1.0-qt5	noble	`1.24.2-1ubuntu1.1`	fixed
Ubuntu	gstreamer1.0-qt6	noble	`1.24.2-1ubuntu1.1`	fixed
Ubuntu	libgstreamer-plugins-good1.0-0	noble	`1.24.2-1ubuntu1.1`	fixed
Ubuntu	libgstreamer-plugins-good1.0-dev	noble	`1.24.2-1ubuntu1.1`	fixed
Ubuntu	gstreamer1.0	noble	`1.24.2-1ubuntu0.1`	fixed
Ubuntu	gir1.2-gstreamer-1.0	noble	`1.24.2-1ubuntu0.1`	fixed
Ubuntu	gstreamer1.0-tools	noble	`1.24.2-1ubuntu0.1`	fixed
Ubuntu	libgstreamer1.0-0	noble	`1.24.2-1ubuntu0.1`	fixed
Ubuntu	libgstreamer1.0-dev	noble	`1.24.2-1ubuntu0.1`	fixed
Ubuntu	gstreamer0.10	14.04	`0.10.36-1.2ubuntu1`	vulnerable
Ubuntu	gstreamer0.10	14.04	`0.10.36-1.2ubuntu2`	vulnerable
Ubuntu	gstreamer0.10	14.04	`0.10.36-1.2ubuntu3`	vulnerable
Ubuntu	gst-plugins-good1.0	pro	`1.12.3-1ubuntu1`	vulnerable
Ubuntu	gst-plugins-good1.0	pro	`1.12.4-1ubuntu1`	vulnerable
Ubuntu	gst-plugins-good1.0	pro	`1.13.1-1ubuntu1`	vulnerable
Ubuntu	gst-plugins-good1.0	pro	`1.13.91-1ubuntu1`	vulnerable
Ubuntu	gst-plugins-good1.0	pro	`1.14.0-1ubuntu1`	vulnerable
Ubuntu	gst-plugins-good1.0	pro	`1.14.1-1ubuntu1~ubuntu18.04.1`	vulnerable
Ubuntu	gst-plugins-good1.0	pro	`1.14.4-1ubuntu1~ubuntu18.04.1`	vulnerable
Ubuntu	gst-plugins-good1.0	pro	`1.14.5-0ubuntu1~18.04.1`	vulnerable
Ubuntu	gst-plugins-good1.0	pro	`1.14.5-0ubuntu1~18.04.2`	vulnerable
Ubuntu	gst-plugins-good1.0	pro	`1.14.5-0ubuntu1~18.04.3`	vulnerable
Ubuntu	gst-plugins-good1.0	pro	`1.14.5-0ubuntu1~18.04.3+esm1`	vulnerable
Ubuntu	gst-plugins-good1.0	pro	`1.14.5-0ubuntu1~18.04.3+esm2`	vulnerable
Ubuntu	gst-plugins-good1.0	pro	`1.14.5-0ubuntu1~18.04.3+esm3`	vulnerable
Ubuntu	gst-plugins-good1.0	pro	`1.14.5-0ubuntu1~18.04.3+esm4`	vulnerable
Ubuntu	gstreamer1.0	pro	`1.6.0-1`	vulnerable
Ubuntu	gstreamer1.0	pro	`1.6.1-1`	vulnerable
Ubuntu	gstreamer1.0	pro	`1.6.2-1`	vulnerable
Ubuntu	gstreamer1.0	pro	`1.7.1-1`	vulnerable
Ubuntu	gstreamer1.0	pro	`1.7.2-1`	vulnerable
Ubuntu	gstreamer1.0	pro	`1.7.90-1`	vulnerable
Ubuntu	gstreamer1.0	pro	`1.7.91-1`	vulnerable
Ubuntu	gstreamer1.0	pro	`1.8.0-1`	vulnerable
Ubuntu	gstreamer1.0	pro	`1.8.1-1~ubuntu1`	vulnerable
Ubuntu	gstreamer1.0	pro	`1.8.2-1~ubuntu1`	vulnerable
Ubuntu	gstreamer1.0	pro	`1.8.3-1~ubuntu0.1`	vulnerable
Ubuntu	gstreamer1.0	pro	`1.8.3-1~ubuntu0.1+esm1`	vulnerable
Ubuntu	gst-plugins-good0.10	16.04	`0.10.31-3+nmu4ubuntu2~gcc5.1`	vulnerable
Ubuntu	gst-plugins-good0.10	16.04	`0.10.31-3+nmu4ubuntu2.16.04.1`	vulnerable
Ubuntu	gst-plugins-good0.10	16.04	`0.10.31-3+nmu4ubuntu2.16.04.2`	vulnerable
Ubuntu	gst-plugins-good0.10	16.04	`0.10.31-3+nmu4ubuntu2.16.04.3`	vulnerable
Ubuntu	gstreamer0.10	16.04	`0.10.36-1.5ubuntu1`	vulnerable
Ubuntu	gstreamer1.0	18.04	`1.12.3-1`	vulnerable
Ubuntu	gstreamer1.0	18.04	`1.12.4-1`	vulnerable
Ubuntu	gstreamer1.0	18.04	`1.13.1-1`	vulnerable
Ubuntu	gstreamer1.0	18.04	`1.13.91-1`	vulnerable
Ubuntu	gstreamer1.0	18.04	`1.14.0-1`	vulnerable
Ubuntu	gstreamer1.0	18.04	`1.14.1-1~ubuntu18.04.1`	vulnerable
Ubuntu	gstreamer1.0	18.04	`1.14.1-1~ubuntu18.04.2`	vulnerable
Ubuntu	gstreamer1.0	18.04	`1.14.4-1~ubuntu18.04.1`	vulnerable
Ubuntu	gstreamer1.0	18.04	`1.14.5-0ubuntu1~18.04.1`	vulnerable
Ubuntu	gstreamer1.0	18.04	`1.14.5-0ubuntu1~18.04.2`	vulnerable
Ubuntu	gst-plugins-good1.0	20.04	`1.16.1-1ubuntu1`	vulnerable
Ubuntu	gst-plugins-good1.0	20.04	`1.16.2-1ubuntu1`	vulnerable
Ubuntu	gst-plugins-good1.0	20.04	`1.16.2-1ubuntu2`	vulnerable
Ubuntu	gst-plugins-good1.0	20.04	`1.16.2-1ubuntu2.1`	vulnerable
Ubuntu	gst-plugins-good1.0	20.04	`1.16.3-0ubuntu1`	vulnerable
Ubuntu	gst-plugins-good1.0	20.04	`1.16.3-0ubuntu1.1`	vulnerable
Ubuntu	gst-plugins-good1.0	20.04	`1.16.3-0ubuntu1.2`	vulnerable
Ubuntu	gst-plugins-good1.0	20.04	`1.16.3-0ubuntu1.3`	fixed
Ubuntu	gstreamer1.0	20.04	`1.16.1-1`	vulnerable
Ubuntu	gstreamer1.0	20.04	`1.16.2-1`	vulnerable
Ubuntu	gstreamer1.0	20.04	`1.16.2-2`	vulnerable
Ubuntu	gstreamer1.0	20.04	`1.16.3-0ubuntu1`	vulnerable
Ubuntu	gstreamer1.0	20.04	`1.16.3-0ubuntu1.1`	vulnerable
Ubuntu	gstreamer1.0	20.04	`1.16.3-0ubuntu1.2`	fixed
Ubuntu	gst-plugins-good1.0	22.04	`1.18.5-1ubuntu2`	vulnerable
Ubuntu	gst-plugins-good1.0	22.04	`1.18.5-1ubuntu3`	vulnerable
Ubuntu	gst-plugins-good1.0	22.04	`1.20.0-2ubuntu1`	vulnerable
Ubuntu	gst-plugins-good1.0	22.04	`1.20.1-1ubuntu1`	vulnerable
Ubuntu	gst-plugins-good1.0	22.04	`1.20.3-0ubuntu1`	vulnerable
Ubuntu	gst-plugins-good1.0	22.04	`1.20.3-0ubuntu1.1`	vulnerable
Ubuntu	gst-plugins-good1.0	22.04	`1.20.3-0ubuntu1.3`	fixed
Ubuntu	gstreamer1.0	22.04	`1.18.5-1`	vulnerable
Ubuntu	gstreamer1.0	22.04	`1.19.90-1`	vulnerable
Ubuntu	gstreamer1.0	22.04	`1.20.0-1`	vulnerable
Ubuntu	gstreamer1.0	22.04	`1.20.1-1`	vulnerable
Ubuntu	gstreamer1.0	22.04	`1.20.3-0ubuntu1`	vulnerable
Ubuntu	gstreamer1.0	22.04	`1.20.3-0ubuntu1.1`	fixed
Ubuntu	gst-plugins-good1.0	24.04	`1.22.6-1ubuntu1`	vulnerable
Ubuntu	gst-plugins-good1.0	24.04	`1.22.6-1ubuntu2`	vulnerable
Ubuntu	gst-plugins-good1.0	24.04	`1.22.8-3ubuntu1`	vulnerable
Ubuntu	gst-plugins-good1.0	24.04	`1.22.9-1ubuntu1`	vulnerable
Ubuntu	gst-plugins-good1.0	24.04	`1.24.0-1ubuntu5`	vulnerable
Ubuntu	gst-plugins-good1.0	24.04	`1.24.0-1ubuntu7`	vulnerable
Ubuntu	gst-plugins-good1.0	24.04	`1.24.1-2ubuntu1`	vulnerable
Ubuntu	gst-plugins-good1.0	24.04	`1.24.2-1ubuntu1`	vulnerable
Ubuntu	gst-plugins-good1.0	24.04	`1.24.2-1ubuntu1.1`	fixed
Ubuntu	gstreamer1.0	24.04	`1.22.5-1`	vulnerable
Ubuntu	gstreamer1.0	24.04	`1.22.6-1`	vulnerable
Ubuntu	gstreamer1.0	24.04	`1.22.7-1`	vulnerable
Ubuntu	gstreamer1.0	24.04	`1.22.8-1`	vulnerable
Ubuntu	gstreamer1.0	24.04	`1.22.10-1`	vulnerable
Ubuntu	gstreamer1.0	24.04	`1.24.1-1`	vulnerable
Ubuntu	gstreamer1.0	24.04	`1.24.1-1build1`	vulnerable
Ubuntu	gstreamer1.0	24.04	`1.24.2-1`	vulnerable
Ubuntu	gstreamer1.0	24.04	`1.24.2-1ubuntu0.1`	fixed
Ubuntu	gstreamer1.0	20.04	`1.16.1-1`	vulnerable
Ubuntu	gstreamer1.0	20.04	`1.16.2-1`	vulnerable
Ubuntu	gstreamer1.0	20.04	`1.16.2-2`	vulnerable
Ubuntu	gstreamer1.0	20.04	`1.16.3-0ubuntu1`	vulnerable
Ubuntu	gstreamer1.0	20.04	`1.16.3-0ubuntu1.1`	vulnerable
Ubuntu	gstreamer1.0	20.04	`1.16.3-0ubuntu1.2`	fixed
Ubuntu	gstreamer1.0	22.04	`1.18.5-1`	vulnerable
Ubuntu	gstreamer1.0	22.04	`1.19.90-1`	vulnerable
Ubuntu	gstreamer1.0	22.04	`1.20.0-1`	vulnerable
Ubuntu	gstreamer1.0	22.04	`1.20.1-1`	vulnerable
Ubuntu	gstreamer1.0	22.04	`1.20.3-0ubuntu1`	vulnerable
Ubuntu	gstreamer1.0	22.04	`1.20.3-0ubuntu1.1`	fixed
Ubuntu	gstreamer1.0	24.04	`1.22.5-1`	vulnerable
Ubuntu	gstreamer1.0	24.04	`1.22.6-1`	vulnerable
Ubuntu	gstreamer1.0	24.04	`1.22.7-1`	vulnerable
Ubuntu	gstreamer1.0	24.04	`1.22.8-1`	vulnerable
Ubuntu	gstreamer1.0	24.04	`1.22.10-1`	vulnerable
Ubuntu	gstreamer1.0	24.04	`1.24.1-1`	vulnerable
Ubuntu	gstreamer1.0	24.04	`1.24.1-1build1`	vulnerable
Ubuntu	gstreamer1.0	24.04	`1.24.2-1`	vulnerable
Ubuntu	gstreamer1.0	24.04	`1.24.2-1ubuntu0.1`	fixed
Suse	gstreamer	linux micro 6.0	`1.22.9-2.1`	fixed
Suse	gstreamer	linux enterprise high performance computing 15 sp3-ltss	`1.16.3-150200.3.6.1`	fixed
Suse	gstreamer	linux enterprise server 15 sp3-ltss	`1.16.3-150200.3.6.1`	fixed
Suse	gstreamer	linux enterprise server for sap applications 15 sp3	`1.16.3-150200.3.6.1`	fixed
Suse	gstreamer	linux enterprise micro 5.2	`1.16.3-150200.3.6.1`	fixed
Suse	gstreamer	enterprise storage 7.1	`1.16.3-150200.3.6.1`	fixed
Suse	gstreamer	linux micro 6.1	`1.24.7-slfo.1.1_2.1`	fixed
Suse	gstreamer	linux enterprise server 12 sp5-ltss	`1.8.3-10.12.1`	fixed
Suse	gstreamer	linux enterprise server ltss extended security 12 sp5	`1.8.3-10.12.1`	fixed
Opensuse	gstreamer	tumbleweed	`1.24.10-2.1`	fixed
Suse	gstreamer	linux enterprise module for basesystem 15 sp6	`1.24.0-150600.3.3.1`	fixed
Suse	gstreamer	linux enterprise module for package hub 15 sp6	`1.24.0-150600.3.3.1`	fixed
Opensuse	gstreamer	leap 15.6	`1.24.0-150600.3.3.1`	fixed
Suse	gstreamer	linux enterprise micro 5.5	`1.22.0-150500.3.5.1`	fixed
Suse	gstreamer	linux enterprise high performance computing 15 sp5-espos	`1.22.0-150500.3.5.1`	fixed
Suse	gstreamer	linux enterprise high performance computing 15 sp5-ltss	`1.22.0-150500.3.5.1`	fixed
Suse	gstreamer	linux enterprise server 15 sp5-ltss	`1.22.0-150500.3.5.1`	fixed
Suse	gstreamer	linux enterprise server for sap applications 15 sp5	`1.22.0-150500.3.5.1`	fixed
Suse	gstreamer	linux enterprise micro 5.3	`1.20.1-150400.3.3.1`	fixed
Suse	gstreamer	linux enterprise micro 5.4	`1.20.1-150400.3.3.1`	fixed
Suse	gstreamer	linux enterprise high performance computing 15 sp4-espos	`1.20.1-150400.3.3.1`	fixed
Suse	gstreamer	linux enterprise high performance computing 15 sp4-ltss	`1.20.1-150400.3.3.1`	fixed
Suse	gstreamer	linux enterprise server 15 sp4-ltss	`1.20.1-150400.3.3.1`	fixed
Suse	gstreamer	linux enterprise server for sap applications 15 sp4	`1.20.1-150400.3.3.1`	fixed
Suse	gstreamer	manager proxy 4.3	`1.20.1-150400.3.3.1`	fixed
Suse	gstreamer	manager server 4.3	`1.20.1-150400.3.3.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	gstreamer1.0	source	sid	`1.24.10-1`	not yet assigned	Not reported	Not reported
Debian	gstreamer1.0	source	forky	`1.24.10-1`	not yet assigned	Not reported	Not reported
Debian	gstreamer1.0	source	trixie	`1.24.10-1`	not yet assigned	Not reported	Not reported
Debian	gstreamer1.0	source	bookworm	`1.22.0-2+deb12u1`	not yet assigned	Not reported	Not reported
Debian	gst-plugins-good1.0	source	sid	`1.24.10-1`	not yet assigned	Not reported	Not reported
Debian	gst-plugins-good1.0	source	forky	`1.24.10-1`	not yet assigned	Not reported	Not reported
Debian	gst-plugins-good1.0	source	trixie	`1.24.10-1`	not yet assigned	Not reported	Not reported
Debian	gst-plugins-good1.0	source	bookworm	`1.22.0-5+deb12u2`	not yet assigned	Not reported	Not reported
Ubuntu	gst-plugins-good1.0	deb	noble	`1.24.2-1ubuntu1.1`	Not reported	Not reported	Not reported
Ubuntu	gstreamer1.0-gtk3	deb	noble	`1.24.2-1ubuntu1.1`	Not reported	Not reported	Not reported
Ubuntu	gstreamer1.0-plugins-good	deb	noble	`1.24.2-1ubuntu1.1`	Not reported	Not reported	Not reported
Ubuntu	gstreamer1.0-pulseaudio	deb	noble	`1.24.2-1ubuntu1.1`	Not reported	Not reported	Not reported
Ubuntu	gstreamer1.0-qt5	deb	noble	`1.24.2-1ubuntu1.1`	Not reported	Not reported	Not reported
Ubuntu	gstreamer1.0-qt6	deb	noble	`1.24.2-1ubuntu1.1`	Not reported	Not reported	Not reported
Ubuntu	libgstreamer-plugins-good1.0-0	deb	noble	`1.24.2-1ubuntu1.1`	Not reported	Not reported	Not reported
Ubuntu	libgstreamer-plugins-good1.0-dev	deb	noble	`1.24.2-1ubuntu1.1`	Not reported	Not reported	Not reported
Ubuntu	gstreamer1.0	deb	noble	`1.24.2-1ubuntu0.1`	Not reported	Not reported	Not reported
Ubuntu	gir1.2-gstreamer-1.0	deb	noble	`1.24.2-1ubuntu0.1`	Not reported	Not reported	Not reported
Ubuntu	gstreamer1.0-tools	deb	noble	`1.24.2-1ubuntu0.1`	Not reported	Not reported	Not reported
Ubuntu	libgstreamer1.0-0	deb	noble	`1.24.2-1ubuntu0.1`	Not reported	Not reported	Not reported
Ubuntu	libgstreamer1.0-dev	deb	noble	`1.24.2-1ubuntu0.1`	Not reported	Not reported	Not reported
Ubuntu	gst-plugins-good1.0	deb	20.04	`1.16.3-0ubuntu1.3`	Not reported	UBUNTU-CVE-2024-47606	Not reported
Ubuntu	gstreamer1.0	deb	20.04	`1.16.3-0ubuntu1.2`	Not reported	UBUNTU-CVE-2024-47606	Not reported
Ubuntu	gst-plugins-good1.0	deb	22.04	`1.20.3-0ubuntu1.3`	Not reported	UBUNTU-CVE-2024-47606	Not reported
Ubuntu	gstreamer1.0	deb	22.04	`1.20.3-0ubuntu1.1`	Not reported	UBUNTU-CVE-2024-47606	Not reported
Ubuntu	gst-plugins-good1.0	deb	24.04	`1.24.2-1ubuntu1.1`	Not reported	UBUNTU-CVE-2024-47606	Not reported
Ubuntu	gstreamer1.0	deb	24.04	`1.24.2-1ubuntu0.1`	Not reported	UBUNTU-CVE-2024-47606	Not reported
Ubuntu	gstreamer1.0	deb	20.04	`1.16.3-0ubuntu1.2`	Not reported	USN-7174-1	Not reported
Ubuntu	gstreamer1.0	deb	22.04	`1.20.3-0ubuntu1.1`	Not reported	USN-7174-1	Not reported
Ubuntu	gstreamer1.0	deb	24.04	`1.24.2-1ubuntu0.1`	Not reported	USN-7174-1	Not reported
Suse	gstreamer	rpm	linux micro 6.0	`1.22.9-2.1`	Not reported	SUSE-SU-2025:20693-1	Not reported
Suse	gstreamer	rpm	linux enterprise high performance computing 15 sp3-ltss	`1.16.3-150200.3.6.1`	Not reported	SUSE-SU-2025:02034-1	Not reported
Suse	gstreamer	rpm	linux enterprise server 15 sp3-ltss	`1.16.3-150200.3.6.1`	Not reported	SUSE-SU-2025:02034-1	Not reported
Suse	gstreamer	rpm	linux enterprise server for sap applications 15 sp3	`1.16.3-150200.3.6.1`	Not reported	SUSE-SU-2025:02034-1	Not reported
Suse	gstreamer	rpm	linux enterprise micro 5.2	`1.16.3-150200.3.6.1`	Not reported	SUSE-SU-2025:02034-1	Not reported
Suse	gstreamer	rpm	enterprise storage 7.1	`1.16.3-150200.3.6.1`	Not reported	SUSE-SU-2025:02034-1	Not reported
Suse	gstreamer	rpm	linux micro 6.1	`1.24.7-slfo.1.1_2.1`	Not reported	SUSE-SU-2025:20240-1	Not reported
Suse	gstreamer	rpm	linux enterprise server 12 sp5-ltss	`1.8.3-10.12.1`	Not reported	SUSE-SU-2025:0051-1	Not reported
Suse	gstreamer	rpm	linux enterprise server ltss extended security 12 sp5	`1.8.3-10.12.1`	Not reported	SUSE-SU-2025:0051-1	Not reported
Opensuse	gstreamer	rpm	tumbleweed	`1.24.10-2.1`	Not reported	OPENSUSE-SU-2024:14576-1	Not reported
Suse	gstreamer	rpm	linux enterprise module for basesystem 15 sp6	`1.24.0-150600.3.3.1`	Not reported	SUSE-SU-2025:0062-1	Not reported
Suse	gstreamer	rpm	linux enterprise module for package hub 15 sp6	`1.24.0-150600.3.3.1`	Not reported	SUSE-SU-2025:0062-1	Not reported
Opensuse	gstreamer	rpm	leap 15.6	`1.24.0-150600.3.3.1`	Not reported	SUSE-SU-2025:0062-1	Not reported
Suse	gstreamer	rpm	linux enterprise micro 5.5	`1.22.0-150500.3.5.1`	Not reported	SUSE-SU-2025:0053-1	Not reported
Suse	gstreamer	rpm	linux enterprise high performance computing 15 sp5-espos	`1.22.0-150500.3.5.1`	Not reported	SUSE-SU-2025:0053-1	Not reported
Suse	gstreamer	rpm	linux enterprise high performance computing 15 sp5-ltss	`1.22.0-150500.3.5.1`	Not reported	SUSE-SU-2025:0053-1	Not reported
Suse	gstreamer	rpm	linux enterprise server 15 sp5-ltss	`1.22.0-150500.3.5.1`	Not reported	SUSE-SU-2025:0053-1	Not reported
Suse	gstreamer	rpm	linux enterprise server for sap applications 15 sp5	`1.22.0-150500.3.5.1`	Not reported	SUSE-SU-2025:0053-1	Not reported
Suse	gstreamer	rpm	linux enterprise micro 5.3	`1.20.1-150400.3.3.1`	Not reported	SUSE-SU-2025:0070-1	Not reported
Suse	gstreamer	rpm	linux enterprise micro 5.4	`1.20.1-150400.3.3.1`	Not reported	SUSE-SU-2025:0070-1	Not reported
Suse	gstreamer	rpm	linux enterprise high performance computing 15 sp4-espos	`1.20.1-150400.3.3.1`	Not reported	SUSE-SU-2025:0070-1	Not reported
Suse	gstreamer	rpm	linux enterprise high performance computing 15 sp4-ltss	`1.20.1-150400.3.3.1`	Not reported	SUSE-SU-2025:0070-1	Not reported
Suse	gstreamer	rpm	linux enterprise server 15 sp4-ltss	`1.20.1-150400.3.3.1`	Not reported	SUSE-SU-2025:0070-1	Not reported
Suse	gstreamer	rpm	linux enterprise server for sap applications 15 sp4	`1.20.1-150400.3.3.1`	Not reported	SUSE-SU-2025:0070-1	Not reported
Suse	gstreamer	rpm	manager proxy 4.3	`1.20.1-150400.3.3.1`	Not reported	SUSE-SU-2025:0070-1	Not reported
Suse	gstreamer	rpm	manager server 4.3	`1.20.1-150400.3.3.1`	Not reported	SUSE-SU-2025:0070-1	Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

[gstreamer-32bit]Unknown
Source package: [gstreamer]
Details (1)
- 1.28.6-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 1.24.10-2.1
  Version impact unknown
  usn · gstreamer · opensuse · tumbleweed
[gstreamer-devel]Unknown
Source package: [gstreamer]
Details (1)
- 1.28.6-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 1.24.10-2.1
  Version impact unknown
  usn · gstreamer · opensuse · tumbleweed
[gstreamer-devel-32bit]Unknown
Source package: [gstreamer]
Details (1)
- 1.28.6-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 1.24.10-2.1
  Version impact unknown
  usn · gstreamer · opensuse · tumbleweed
[gstreamer-lang]Unknown
Source package: [gstreamer]
Details (1)
- 1.28.6-1.1 · noarch · tumbleweed
  Unknown · Fixed: 1.24.10-2.1
  Version impact unknown
  usn · gstreamer · opensuse · tumbleweed
[gstreamer-utils]Unknown
Source package: [gstreamer]
Details (1)
- 1.28.6-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 1.24.10-2.1
  Version impact unknown
  usn · gstreamer · opensuse · tumbleweed
[libgstreamer-1_0-0]Unknown
Source package: [gstreamer]
Details (1)
- 1.28.6-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 1.24.10-2.1
  Version impact unknown
  usn · gstreamer · opensuse · tumbleweed
[libgstreamer-1_0-0-32bit]Unknown
Source package: [gstreamer]
Details (1)
- 1.28.6-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 1.24.10-2.1
  Version impact unknown
  usn · gstreamer · opensuse · tumbleweed
[typelib-1_0-Gst-1_0]Unknown
Source package: [gstreamer]
Details (1)
- 1.28.6-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 1.24.10-2.1
  Version impact unknown
  usn · gstreamer · opensuse · tumbleweed
[typelib-1_0-Gst-1_0-32bit]Unknown
Source package: [gstreamer]
Details (1)
- 1.28.6-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 1.24.10-2.1
  Version impact unknown
  usn · gstreamer · opensuse · tumbleweed

[Debian 12 (Bookworm)]

[gir1.2-gstreamer-1.0]Fixed
Source package: [gstreamer1.0]
Details (4)
- 1.22.0-2+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 1.22.0-2+deb12u1
  usn · gstreamer1.0 · debian · bookworm; usn · gstreamer1.0 · debian · 12
- 1.22.0-2+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 1.22.0-2+deb12u1
  usn · gstreamer1.0 · debian · bookworm; usn · gstreamer1.0 · debian · 12
- 1.22.0-2+deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 1.22.0-2+deb12u1
  usn · gstreamer1.0 · debian · bookworm; usn · gstreamer1.0 · debian · 12
- 1.22.0-2+deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 1.22.0-2+deb12u1
  usn · gstreamer1.0 · debian · bookworm; usn · gstreamer1.0 · debian · 12
[gstreamer1.0-gtk3]Fixed
Source package: [gst-plugins-good1.0]
Details (4)
- 1.22.0-5+deb12u3 · amd64 · bookworm
  Fixed · Fixed: 1.22.0-5+deb12u2
  usn · gst-plugins-good1.0 · debian · bookworm; usn · gst-plugins-good1.0 · debian · 12
- 1.22.0-5+deb12u3 · arm64 · bookworm
  Fixed · Fixed: 1.22.0-5+deb12u2
  usn · gst-plugins-good1.0 · debian · bookworm; usn · gst-plugins-good1.0 · debian · 12
- 1.22.0-5+deb12u2 · amd64 · bookworm-security
  Fixed · Fixed: 1.22.0-5+deb12u2
  usn · gst-plugins-good1.0 · debian · bookworm; usn · gst-plugins-good1.0 · debian · 12
- 1.22.0-5+deb12u2 · arm64 · bookworm-security
  Fixed · Fixed: 1.22.0-5+deb12u2
  usn · gst-plugins-good1.0 · debian · bookworm; usn · gst-plugins-good1.0 · debian · 12
[gstreamer1.0-plugins-good]Fixed
Source package: [gst-plugins-good1.0]
Details (4)
- 1.22.0-5+deb12u3 · amd64 · bookworm
  Fixed · Fixed: 1.22.0-5+deb12u2
  usn · gst-plugins-good1.0 · debian · bookworm; usn · gst-plugins-good1.0 · debian · 12
- 1.22.0-5+deb12u3 · arm64 · bookworm
  Fixed · Fixed: 1.22.0-5+deb12u2
  usn · gst-plugins-good1.0 · debian · bookworm; usn · gst-plugins-good1.0 · debian · 12
- 1.22.0-5+deb12u2 · amd64 · bookworm-security
  Fixed · Fixed: 1.22.0-5+deb12u2
  usn · gst-plugins-good1.0 · debian · bookworm; usn · gst-plugins-good1.0 · debian · 12
- 1.22.0-5+deb12u2 · arm64 · bookworm-security
  Fixed · Fixed: 1.22.0-5+deb12u2
  usn · gst-plugins-good1.0 · debian · bookworm; usn · gst-plugins-good1.0 · debian · 12
[gstreamer1.0-pulseaudio]Fixed
Source package: [gst-plugins-good1.0]
Details (4)
- 1.22.0-5+deb12u3 · amd64 · bookworm
  Fixed · Fixed: 1.22.0-5+deb12u2
  usn · gst-plugins-good1.0 · debian · bookworm; usn · gst-plugins-good1.0 · debian · 12
- 1.22.0-5+deb12u3 · arm64 · bookworm
  Fixed · Fixed: 1.22.0-5+deb12u2
  usn · gst-plugins-good1.0 · debian · bookworm; usn · gst-plugins-good1.0 · debian · 12
- 1.22.0-5+deb12u2 · amd64 · bookworm-security
  Fixed · Fixed: 1.22.0-5+deb12u2
  usn · gst-plugins-good1.0 · debian · bookworm; usn · gst-plugins-good1.0 · debian · 12
- 1.22.0-5+deb12u2 · arm64 · bookworm-security
  Fixed · Fixed: 1.22.0-5+deb12u2
  usn · gst-plugins-good1.0 · debian · bookworm; usn · gst-plugins-good1.0 · debian · 12
[gstreamer1.0-qt5]Fixed
Source package: [gst-plugins-good1.0]
Details (4)
- 1.22.0-5+deb12u3 · amd64 · bookworm
  Fixed · Fixed: 1.22.0-5+deb12u2
  usn · gst-plugins-good1.0 · debian · bookworm; usn · gst-plugins-good1.0 · debian · 12
- 1.22.0-5+deb12u3 · arm64 · bookworm
  Fixed · Fixed: 1.22.0-5+deb12u2
  usn · gst-plugins-good1.0 · debian · bookworm; usn · gst-plugins-good1.0 · debian · 12
- 1.22.0-5+deb12u2 · amd64 · bookworm-security
  Fixed · Fixed: 1.22.0-5+deb12u2
  usn · gst-plugins-good1.0 · debian · bookworm; usn · gst-plugins-good1.0 · debian · 12
- 1.22.0-5+deb12u2 · arm64 · bookworm-security
  Fixed · Fixed: 1.22.0-5+deb12u2
  usn · gst-plugins-good1.0 · debian · bookworm; usn · gst-plugins-good1.0 · debian · 12
[gstreamer1.0-qt6]Fixed
Source package: [gst-plugins-good1.0]
Details (4)
- 1.22.0-5+deb12u3 · amd64 · bookworm
  Fixed · Fixed: 1.22.0-5+deb12u2
  usn · gst-plugins-good1.0 · debian · bookworm; usn · gst-plugins-good1.0 · debian · 12
- 1.22.0-5+deb12u3 · arm64 · bookworm
  Fixed · Fixed: 1.22.0-5+deb12u2
  usn · gst-plugins-good1.0 · debian · bookworm; usn · gst-plugins-good1.0 · debian · 12
- 1.22.0-5+deb12u2 · amd64 · bookworm-security
  Fixed · Fixed: 1.22.0-5+deb12u2
  usn · gst-plugins-good1.0 · debian · bookworm; usn · gst-plugins-good1.0 · debian · 12
- 1.22.0-5+deb12u2 · arm64 · bookworm-security
  Fixed · Fixed: 1.22.0-5+deb12u2
  usn · gst-plugins-good1.0 · debian · bookworm; usn · gst-plugins-good1.0 · debian · 12
[gstreamer1.0-tools]Fixed
Source package: [gstreamer1.0]
Details (4)
- 1.22.0-2+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 1.22.0-2+deb12u1
  usn · gstreamer1.0 · debian · bookworm; usn · gstreamer1.0 · debian · 12
- 1.22.0-2+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 1.22.0-2+deb12u1
  usn · gstreamer1.0 · debian · bookworm; usn · gstreamer1.0 · debian · 12
- 1.22.0-2+deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 1.22.0-2+deb12u1
  usn · gstreamer1.0 · debian · bookworm; usn · gstreamer1.0 · debian · 12
- 1.22.0-2+deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 1.22.0-2+deb12u1
  usn · gstreamer1.0 · debian · bookworm; usn · gstreamer1.0 · debian · 12
[libgstreamer1.0-0]Fixed
Source package: [gstreamer1.0]
Details (4)
- 1.22.0-2+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 1.22.0-2+deb12u1
  usn · gstreamer1.0 · debian · bookworm; usn · gstreamer1.0 · debian · 12
- 1.22.0-2+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 1.22.0-2+deb12u1
  usn · gstreamer1.0 · debian · bookworm; usn · gstreamer1.0 · debian · 12
- 1.22.0-2+deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 1.22.0-2+deb12u1
  usn · gstreamer1.0 · debian · bookworm; usn · gstreamer1.0 · debian · 12
- 1.22.0-2+deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 1.22.0-2+deb12u1
  usn · gstreamer1.0 · debian · bookworm; usn · gstreamer1.0 · debian · 12
[libgstreamer1.0-dev]Fixed
Source package: [gstreamer1.0]
Details (4)
- 1.22.0-2+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 1.22.0-2+deb12u1
  usn · gstreamer1.0 · debian · bookworm; usn · gstreamer1.0 · debian · 12
- 1.22.0-2+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 1.22.0-2+deb12u1
  usn · gstreamer1.0 · debian · bookworm; usn · gstreamer1.0 · debian · 12
- 1.22.0-2+deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 1.22.0-2+deb12u1
  usn · gstreamer1.0 · debian · bookworm; usn · gstreamer1.0 · debian · 12
- 1.22.0-2+deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 1.22.0-2+deb12u1
  usn · gstreamer1.0 · debian · bookworm; usn · gstreamer1.0 · debian · 12

[Debian 13 (Trixie)]

[gir1.2-gstreamer-1.0]Fixed
Source package: [gstreamer1.0]
Details (2)
- 1.26.2-2 · amd64 · trixie
  Fixed · Fixed: 1.24.10-1
  usn · gstreamer1.0 · debian · 13
- 1.26.2-2 · arm64 · trixie
  Fixed · Fixed: 1.24.10-1
  usn · gstreamer1.0 · debian · 13
[gstreamer1.0-gtk3]Fixed
Source package: [gst-plugins-good1.0]
Details (4)
- 1.26.2-1+deb13u2 · amd64 · trixie
  Fixed · Fixed: 1.24.10-1
  usn · gst-plugins-good1.0 · debian · 13
- 1.26.2-1+deb13u2 · arm64 · trixie
  Fixed · Fixed: 1.24.10-1
  usn · gst-plugins-good1.0 · debian · 13
- 1.26.2-1+deb13u2 · amd64 · trixie-security
  Fixed · Fixed: 1.24.10-1
  usn · gst-plugins-good1.0 · debian · 13
- 1.26.2-1+deb13u2 · arm64 · trixie-security
  Fixed · Fixed: 1.24.10-1
  usn · gst-plugins-good1.0 · debian · 13

Next results

Observed: Oct 27, 2026, 6:46:31 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]