Export limit exceeded: 21733 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 128

Export CSV
CVE-2016-9811

gstreamer: Out of bounds heap read in windows_icon_typefind

The windows_icon_typefind function in gst-plugins-base in GStreamer before 1.10.2, when G_SLICE is set to always-malloc, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted ico file.

CVSS 3.1 · 4.7 Medium EPSS 2.3% KEV · Not listed
Vendors
Debian Fedoraproject Gstreamer and 1 more
Products
Debian Linux Fedora Gstreamer and 7 more
CVE-2016-9810

gstreamer: Invalid memory read in g_type_check_instance_is_fundamentally_a

The gst_decode_chain_free_internal function in the flxdex decoder in gst-plugins-good in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (invalid memory read and crash) via an invalid file, which triggers an incorrect unref call.

CVSS 3.0 · 5.5 Medium EPSS 2.4% KEV · Not listed
Vendors
Gstreamer Redhat
Products
Gstreamer Enterprise Linux
CVE-2016-9809

gstreamer-plugins-bad-free: Off-by-one read in gst_h264_parse_set_caps

Off-by-one error in the gst_h264_parse_set_caps function in GStreamer before 1.10.2 allows remote attackers to have unspecified impact via a crafted file, which triggers an out-of-bounds read.

CVSS 3.0 · 7.8 High EPSS 2.9% KEV · Not listed
Vendors
Gstreamer Redhat
Products
Gstreamer Enterprise Linux
CVE-2016-9808

gstreamer-plugins-good: Heap buffer overflow in FLIC decoder

The FLIC decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via a crafted series of skip and count pairs.

CVSS 3.0 · 7.5 High EPSS 5.1% KEV · Not listed
Vendors
Gstreamer Redhat
Products
Gstreamer Enterprise Linux
CVE-2016-9807

gstreamer-plugins-good: Invalid memory read in flx_decode_chunks

The flx_decode_chunks function in gst/flx/gstflxdec.c in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted FLIC file.

CVSS 3.0 · 5.5 Medium EPSS 2.5% KEV · Not listed
Vendors
Gstreamer Redhat
Products
Gstreamer Enterprise Linux
CVE-2016-9636

gstreamer-plugins-good: Heap buffer overflow in FLIC decoder

Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'write count' that goes beyond the initialized buffer.

CVSS 3.0 · 9.8 Critical EPSS 8.3% KEV · Not listed
Vendors
Debian Gstreamer Redhat
Products
Debian Linux Gstreamer Enterprise Linux and 4 more
CVE-2016-9635

gstreamer-plugins-good: Heap buffer overflow in FLIC decoder

Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'skip count' that goes beyond initialized buffer.

CVSS 3.0 · 9.8 Critical EPSS 8.8% KEV · Not listed
Vendors
Debian Gstreamer Redhat
Products
Debian Linux Gstreamer Enterprise Linux and 4 more
CVE-2024-40897

orc: Stack-based buffer overflow vulnerability in ORC

Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially crafted file with the affected ORC compiler, an arbitrary code may be executed on the developer's build environment. This may lead to compromise of developer machines or CI build environments.

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed
Vendors
Gstreamer Redhat
Products
Orc Enterprise Linux Rhel Aus and 3 more