[CVE-2026-111183 ] Published: Oct 21, 2026, 6:17:00 PM UTC
gst-plugins-good1.0: CVE-2026-111183
Critical(9.8) Sconosciuto Dettagli (4) 1.22.0-5+deb12u3 · amd64 · bookworm
Sconosciuto
Version impact unknown
dsa · gst-plugins-good1.0 · debian · bookworm
1.22.0-5+deb12u3 · arm64 · bookworm
Sconosciuto
Version impact unknown
dsa · gst-plugins-good1.0 · debian · bookworm
1.22.0-5+deb12u2 · amd64 · bookworm-security
Sconosciuto
Version impact unknown
dsa · gst-plugins-good1.0 · debian · bookworm
1.22.0-5+deb12u2 · arm64 · bookworm-security
Sconosciuto
Version impact unknown
dsa · gst-plugins-good1.0 · debian · bookworm
[CVE-2026-46471 ] Published: Oct 16, 2026, 12:00:00 AM UTC
An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemux_parse_uuid function may read past the end of a heap-allocated buffer, allowi
Medium(5.5) Sconosciuto Dettagli (4) 1.22.0-5+deb12u3 · amd64 · bookworm
Sconosciuto · Corretta: 1.28.1-1
Version impact unknown
nvd · gst-plugins-good1.0 · debian · bookworm; pypi · gst-plugins-good1.0 · debian · 12; pypi · gst-plugins-good1.0 · debian · 13; pypi · gst-plugins-good1.0 · debian · 14
1.22.0-5+deb12u3 · arm64 · bookworm
Sconosciuto · Corretta: 1.28.1-1
Version impact unknown
nvd · gst-plugins-good1.0 · debian · bookworm; pypi · gst-plugins-good1.0 · debian · 12; pypi · gst-plugins-good1.0 · debian · 13; pypi · gst-plugins-good1.0 · debian · 14
1.22.0-5+deb12u2 · amd64 · bookworm-security
Sconosciuto · Corretta: 1.28.1-1
Version impact unknown
nvd · gst-plugins-good1.0 · debian · bookworm; pypi · gst-plugins-good1.0 · debian · 12; pypi · gst-plugins-good1.0 · debian · 13; pypi · gst-plugins-good1.0 · debian · 14
1.22.0-5+deb12u2 · arm64 · bookworm-security
Sconosciuto · Corretta: 1.28.1-1
Version impact unknown
nvd · gst-plugins-good1.0 · debian · bookworm; pypi · gst-plugins-good1.0 · debian · 12; pypi · gst-plugins-good1.0 · debian · 13; pypi · gst-plugins-good1.0 · debian · 14
[CVE-2026-46472 ] Published: Oct 16, 2026, 12:00:00 AM UTC
An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemux_parse_chnl function may read past the end of a global array, potentially lea
High(7.5) Sconosciuto Dettagli (4) 1.22.0-5+deb12u3 · amd64 · bookworm
Sconosciuto
Version impact unknown
nvd · gst-plugins-good1.0 · debian · bookworm
1.22.0-5+deb12u3 · arm64 · bookworm
Sconosciuto
Version impact unknown
nvd · gst-plugins-good1.0 · debian · bookworm
1.22.0-5+deb12u2 · amd64 · bookworm-security
Sconosciuto
Version impact unknown
nvd · gst-plugins-good1.0 · debian · bookworm
1.22.0-5+deb12u2 · arm64 · bookworm-security
Sconosciuto
Version impact unknown
nvd · gst-plugins-good1.0 · debian · bookworm
[CVE-2026-88914 ] Published: Aug 12, 2026, 8:17:56 PM UTC
A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially crafted MP4 or MOV file containing CEA-608 closed-caption data, an integer overflow in 32-bit unsigned arith
High(7.6) Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 27, 2026, 7:10:10 AM UTC
Dettagli (4) 1.22.0-5+deb12u3 · amd64 · bookworm
Interessata · Corretta: 1.22.0-5+deb12u4
nvd · gst-plugins-good1.0 · debian · bookworm
1.22.0-5+deb12u3 · arm64 · bookworm
Interessata · Corretta: 1.22.0-5+deb12u4
nvd · gst-plugins-good1.0 · debian · bookworm
1.22.0-5+deb12u2 · amd64 · bookworm-security
Interessata · Corretta: 1.22.0-5+deb12u4
nvd · gst-plugins-good1.0 · debian · bookworm
1.22.0-5+deb12u2 · arm64 · bookworm-security
Interessata · Corretta: 1.22.0-5+deb12u4
nvd · gst-plugins-good1.0 · debian · bookworm
[CVE-2026-18649 ] Published: Aug 5, 2026, 10:00:00 PM UTC
A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on the reassembly buffer used during fragment
High(7.5) Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 27, 2026, 7:10:43 AM UTC
Dettagli (4) 1.22.0-5+deb12u3 · amd64 · bookworm
Interessata
nvd · gst-plugins-good1.0 · debian · bookworm; nvd · gst-plugins-good1.0 · debian · 12
1.22.0-5+deb12u3 · arm64 · bookworm
Interessata
nvd · gst-plugins-good1.0 · debian · bookworm; nvd · gst-plugins-good1.0 · debian · 12
1.22.0-5+deb12u2 · amd64 · bookworm-security
Interessata
nvd · gst-plugins-good1.0 · debian · bookworm; nvd · gst-plugins-good1.0 · debian · 12
1.22.0-5+deb12u2 · arm64 · bookworm-security
Interessata
nvd · gst-plugins-good1.0 · debian · bookworm; nvd · gst-plugins-good1.0 · debian · 12
[CVE-2026-73433 ] Published: Aug 5, 2026, 12:00:00 AM UTC
A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an AVI strd chunk, gst_avi_demux_parse_strd() decrements a remaining-length counter by fixed offsets (98 an
High(8.6) Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 27, 2026, 7:10:43 AM UTC
Dettagli (4) 1.22.0-5+deb12u3 · amd64 · bookworm
Interessata · Corretta: 1.22.0-5+deb12u4
nvd · gst-plugins-good1.0 · debian · bookworm
1.22.0-5+deb12u3 · arm64 · bookworm
Interessata · Corretta: 1.22.0-5+deb12u4
nvd · gst-plugins-good1.0 · debian · bookworm
1.22.0-5+deb12u2 · amd64 · bookworm-security
Interessata · Corretta: 1.22.0-5+deb12u4
nvd · gst-plugins-good1.0 · debian · bookworm
1.22.0-5+deb12u2 · arm64 · bookworm-security
Interessata · Corretta: 1.22.0-5+deb12u4
nvd · gst-plugins-good1.0 · debian · bookworm
[CVE-2026-73434 ] Published: Aug 5, 2026, 12:00:00 AM UTC
A flaw was found in GStreamer gst-plugins-good (avidemux). In gst_avi_demux_riff_parse_vprp(), the number of available gst_riff_vprp_video_field_desc entries is calculated by dividing the remaining bu
High(8.2) Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 27, 2026, 7:10:43 AM UTC
Dettagli (4) 1.22.0-5+deb12u3 · amd64 · bookworm
Interessata · Corretta: 1.22.0-5+deb12u4
nvd · gst-plugins-good1.0 · debian · bookworm
1.22.0-5+deb12u3 · arm64 · bookworm
Interessata · Corretta: 1.22.0-5+deb12u4
nvd · gst-plugins-good1.0 · debian · bookworm
1.22.0-5+deb12u2 · amd64 · bookworm-security
Interessata · Corretta: 1.22.0-5+deb12u4
nvd · gst-plugins-good1.0 · debian · bookworm
1.22.0-5+deb12u2 · arm64 · bookworm-security
Interessata · Corretta: 1.22.0-5+deb12u4
nvd · gst-plugins-good1.0 · debian · bookworm
[CVE-2026-17072 ] Published: Jul 28, 2026, 10:00:00 AM UTC
A flaw was found in GStreamer's gst-plugins-good. A heap-based out-of-bounds read of 4 bytes can occur when parsing FLAC audio stream headers embedded in a Matroska or WebM container file. The vulnera
High(7.6) Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 27, 2026, 7:11:25 AM UTC
Dettagli (4) 1.22.0-5+deb12u3 · amd64 · bookworm
Interessata · Corretta: 1.22.0-5+deb12u4
nvd · gst-plugins-good1.0 · debian · bookworm
1.22.0-5+deb12u3 · arm64 · bookworm
Interessata · Corretta: 1.22.0-5+deb12u4
nvd · gst-plugins-good1.0 · debian · bookworm
1.22.0-5+deb12u2 · amd64 · bookworm-security
Interessata · Corretta: 1.22.0-5+deb12u4
nvd · gst-plugins-good1.0 · debian · bookworm
1.22.0-5+deb12u2 · arm64 · bookworm-security
Interessata · Corretta: 1.22.0-5+deb12u4
nvd · gst-plugins-good1.0 · debian · bookworm
[CVE-2026-18295 ] Published: Jul 8, 2026, 10:00:00 PM UTC
GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User in
High(8.8) Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 27, 2026, 10:28:02 AM UTC
Dettagli (4) 1.22.0-5+deb12u3 · amd64 · bookworm
Interessata
nvd · gst-plugins-good1.0 · debian · bookworm; nvd · gst-plugins-good1.0 · debian · 12
1.22.0-5+deb12u3 · arm64 · bookworm
Interessata
nvd · gst-plugins-good1.0 · debian · bookworm; nvd · gst-plugins-good1.0 · debian · 12
1.22.0-5+deb12u2 · amd64 · bookworm-security
Interessata
nvd · gst-plugins-good1.0 · debian · bookworm; nvd · gst-plugins-good1.0 · debian · 12
1.22.0-5+deb12u2 · arm64 · bookworm-security
Interessata
nvd · gst-plugins-good1.0 · debian · bookworm; nvd · gst-plugins-good1.0 · debian · 12
[CVE-2026-18296 ] Published: Jul 8, 2026, 10:00:00 PM UTC
GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer.
High(7.8) Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 27, 2026, 10:28:02 AM UTC
Dettagli (4) 1.22.0-5+deb12u3 · amd64 · bookworm
Interessata
nvd · gst-plugins-good1.0 · debian · bookworm; nvd · gst-plugins-good1.0 · debian · 12
1.22.0-5+deb12u3 · arm64 · bookworm
Interessata
nvd · gst-plugins-good1.0 · debian · bookworm; nvd · gst-plugins-good1.0 · debian · 12
1.22.0-5+deb12u2 · amd64 · bookworm-security
Interessata
nvd · gst-plugins-good1.0 · debian · bookworm; nvd · gst-plugins-good1.0 · debian · 12
1.22.0-5+deb12u2 · arm64 · bookworm-security
Interessata
nvd · gst-plugins-good1.0 · debian · bookworm; nvd · gst-plugins-good1.0 · debian · 12
[CVE-2026-18298 ] Published: Jul 8, 2026, 10:00:00 PM UTC
GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer.
High(8.8) Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 27, 2026, 10:36:28 AM UTC
Dettagli (4) 1.22.0-5+deb12u3 · amd64 · bookworm
Interessata · Corretta: 1.22.0-5+deb12u4
nvd · gst-plugins-good1.0 · debian · bookworm; nvd · gst-plugins-good1.0 · debian · 12
1.22.0-5+deb12u3 · arm64 · bookworm
Interessata · Corretta: 1.22.0-5+deb12u4
nvd · gst-plugins-good1.0 · debian · bookworm; nvd · gst-plugins-good1.0 · debian · 12
1.22.0-5+deb12u2 · amd64 · bookworm-security
Interessata · Corretta: 1.22.0-5+deb12u4
nvd · gst-plugins-good1.0 · debian · bookworm; nvd · gst-plugins-good1.0 · debian · 12
1.22.0-5+deb12u2 · arm64 · bookworm-security
Interessata · Corretta: 1.22.0-5+deb12u4
nvd · gst-plugins-good1.0 · debian · bookworm; nvd · gst-plugins-good1.0 · debian · 12
[CVE-2026-18299 ] Published: Jul 8, 2026, 10:00:00 PM UTC
GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with
High(8.8) Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 27, 2026, 10:34:10 AM UTC
Dettagli (4) 1.22.0-5+deb12u3 · amd64 · bookworm
Interessata · Corretta: 1.22.0-5+deb12u4
nvd · gst-plugins-good1.0 · debian · bookworm; nvd · gst-plugins-good1.0 · debian · 12
1.22.0-5+deb12u3 · arm64 · bookworm
Interessata · Corretta: 1.22.0-5+deb12u4
nvd · gst-plugins-good1.0 · debian · bookworm; nvd · gst-plugins-good1.0 · debian · 12
1.22.0-5+deb12u2 · amd64 · bookworm-security
Interessata · Corretta: 1.22.0-5+deb12u4
nvd · gst-plugins-good1.0 · debian · bookworm; nvd · gst-plugins-good1.0 · debian · 12
1.22.0-5+deb12u2 · arm64 · bookworm-security
Interessata · Corretta: 1.22.0-5+deb12u4
nvd · gst-plugins-good1.0 · debian · bookworm; nvd · gst-plugins-good1.0 · debian · 12
[CVE-2026-53705 ] Published: Jun 12, 2026, 12:00:00 AM UTC
A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good. When processing a specially crafted WavPack file, an integer overflow in the buffer size calculation (4 * block_samples * cha
High(7.6) Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 27, 2026, 7:15:06 AM UTC
Dettagli (4) 1.22.0-5+deb12u3 · amd64 · bookworm
Interessata · Corretta: 1.22.0-5+deb12u4
nvd · gst-plugins-good1.0 · debian · bookworm
1.22.0-5+deb12u3 · arm64 · bookworm
Interessata · Corretta: 1.22.0-5+deb12u4
nvd · gst-plugins-good1.0 · debian · bookworm
1.22.0-5+deb12u2 · amd64 · bookworm-security
Interessata · Corretta: 1.22.0-5+deb12u4
nvd · gst-plugins-good1.0 · debian · bookworm
1.22.0-5+deb12u2 · arm64 · bookworm-security
Interessata · Corretta: 1.22.0-5+deb12u4
nvd · gst-plugins-good1.0 · debian · bookworm
[CVE-2026-46469 ] Published: May 11, 2026, 10:00:00 PM UTC
An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_parse_trak function does not sufficiently validate atom data before perf
Medium(4) Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 27, 2026, 7:35:10 AM UTC
Dettagli (4) 1.22.0-5+deb12u3 · amd64 · bookworm
Interessata
nvd · gst-plugins-good1.0 · debian · bookworm; nvd · gst-plugins-good1.0 · debian · 12
1.22.0-5+deb12u3 · arm64 · bookworm
Interessata
nvd · gst-plugins-good1.0 · debian · bookworm; nvd · gst-plugins-good1.0 · debian · 12
1.22.0-5+deb12u2 · amd64 · bookworm-security
Interessata
nvd · gst-plugins-good1.0 · debian · bookworm; nvd · gst-plugins-good1.0 · debian · 12
1.22.0-5+deb12u2 · arm64 · bookworm-security
Interessata
nvd · gst-plugins-good1.0 · debian · bookworm; nvd · gst-plugins-good1.0 · debian · 12
[CVE-2026-46470 ] Published: May 11, 2026, 10:00:00 PM UTC
An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_audio_caps function does not sufficiently validate atom data before perf
Medium(4) Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 27, 2026, 7:35:10 AM UTC
Dettagli (4) 1.22.0-5+deb12u3 · amd64 · bookworm
Interessata
nvd · gst-plugins-good1.0 · debian · bookworm; nvd · gst-plugins-good1.0 · debian · 12
1.22.0-5+deb12u3 · arm64 · bookworm
Interessata
nvd · gst-plugins-good1.0 · debian · bookworm; nvd · gst-plugins-good1.0 · debian · 12
1.22.0-5+deb12u2 · amd64 · bookworm-security
Interessata
nvd · gst-plugins-good1.0 · debian · bookworm; nvd · gst-plugins-good1.0 · debian · 12
1.22.0-5+deb12u2 · arm64 · bookworm-security
Interessata
nvd · gst-plugins-good1.0 · debian · bookworm; nvd · gst-plugins-good1.0 · debian · 12
[CVE-2026-5056 ] Published: Apr 7, 2026, 10:00:00 PM UTC
GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interact
High(7.8) Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 27, 2026, 7:59:37 AM UTC
Dettagli (4) 1.22.0-5+deb12u3 · amd64 · bookworm
Non interessata
nvd · gst-plugins-good1.0 · debian · bookworm
1.22.0-5+deb12u3 · arm64 · bookworm
Non interessata
nvd · gst-plugins-good1.0 · debian · bookworm
1.22.0-5+deb12u2 · amd64 · bookworm-security
Non interessata
nvd · gst-plugins-good1.0 · debian · bookworm
1.22.0-5+deb12u2 · arm64 · bookworm-security
Non interessata
nvd · gst-plugins-good1.0 · debian · bookworm
[CVE-2026-3083 ] Published: Feb 25, 2026, 11:00:00 PM UTC
GStreamer Good Plugins vulnerabilities
High(8.8) Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 27, 2026, 9:31:14 AM UTC
Dettagli (4) 1.22.0-5+deb12u3 · amd64 · bookworm
Interessata · Corretta: 1.22.0-5+deb12u4
usn · gst-plugins-good1.0 · debian · bookworm
1.22.0-5+deb12u3 · arm64 · bookworm
Interessata · Corretta: 1.22.0-5+deb12u4
usn · gst-plugins-good1.0 · debian · bookworm
1.22.0-5+deb12u2 · amd64 · bookworm-security
Interessata · Corretta: 1.22.0-5+deb12u4
usn · gst-plugins-good1.0 · debian · bookworm
1.22.0-5+deb12u2 · arm64 · bookworm-security
Interessata · Corretta: 1.22.0-5+deb12u4
usn · gst-plugins-good1.0 · debian · bookworm
[CVE-2026-3085 ] Published: Feb 25, 2026, 11:00:00 PM UTC
GStreamer Good Plugins vulnerabilities
High(8.8) Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 27, 2026, 9:31:14 AM UTC
Dettagli (4) 1.22.0-5+deb12u3 · amd64 · bookworm
Interessata · Corretta: 1.22.0-5+deb12u4
usn · gst-plugins-good1.0 · debian · bookworm
1.22.0-5+deb12u3 · arm64 · bookworm
Interessata · Corretta: 1.22.0-5+deb12u4
usn · gst-plugins-good1.0 · debian · bookworm
1.22.0-5+deb12u2 · amd64 · bookworm-security
Interessata · Corretta: 1.22.0-5+deb12u4
usn · gst-plugins-good1.0 · debian · bookworm
1.22.0-5+deb12u2 · arm64 · bookworm-security
Interessata · Corretta: 1.22.0-5+deb12u4
usn · gst-plugins-good1.0 · debian · bookworm
[CVE-2026-39043 ] Published: Feb 25, 2026, 11:00:00 PM UTC
GStreamer Good Plugins vulnerabilities
Medium Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 27, 2026, 9:31:14 AM UTC
Dettagli (4) 1.22.0-5+deb12u3 · amd64 · bookworm
Interessata · Corretta: 1.22.0-5+deb12u4
usn · gst-plugins-good1.0 · debian · bookworm
1.22.0-5+deb12u3 · arm64 · bookworm
Interessata · Corretta: 1.22.0-5+deb12u4
usn · gst-plugins-good1.0 · debian · bookworm
1.22.0-5+deb12u2 · amd64 · bookworm-security
Interessata · Corretta: 1.22.0-5+deb12u4
usn · gst-plugins-good1.0 · debian · bookworm
1.22.0-5+deb12u2 · arm64 · bookworm-security
Interessata · Corretta: 1.22.0-5+deb12u4
usn · gst-plugins-good1.0 · debian · bookworm
[CVE-2026-39044 ] Published: Feb 25, 2026, 11:00:00 PM UTC
GStreamer Good Plugins vulnerabilities
Medium Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 27, 2026, 9:31:14 AM UTC
Dettagli (4) 1.22.0-5+deb12u3 · amd64 · bookworm
Interessata · Corretta: 1.22.0-5+deb12u4
usn · gst-plugins-good1.0 · debian · bookworm
1.22.0-5+deb12u3 · arm64 · bookworm
Interessata · Corretta: 1.22.0-5+deb12u4
usn · gst-plugins-good1.0 · debian · bookworm
1.22.0-5+deb12u2 · amd64 · bookworm-security
Interessata · Corretta: 1.22.0-5+deb12u4
usn · gst-plugins-good1.0 · debian · bookworm
1.22.0-5+deb12u2 · arm64 · bookworm-security
Interessata · Corretta: 1.22.0-5+deb12u4
usn · gst-plugins-good1.0 · debian · bookworm