Skip to content
OpenAdvisories
High DLA-3994-1 1 CVE

gstreamer1.0 - security update

Published Dec 15, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 gstreamer1.0 1.18.4-2.1+deb11u1

Vulnerabilities 1

  • High 8.6
    CVE-2024-47606

    GHSL-2024-166: GStreamer Integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes

    GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemux_parse_theora_extension within qtdemux.c. The vulnerability occurs due to an underflow of the gint size variable, which …

    GStreamer GStreamer gst-plugins-good1.0 gst-plugins-good1.0 Debian Ubuntu Azure Linux Alpine Wolfi